https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:31:17.874045+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-45659 CVE-2023-45659 — Session is not expiring after password reset in Engelsystem 2026-10-07T16:31:17.875159+00:00

Affected: engelsystem

Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixed in the commit `dbb089315ff3d`. Users are advised to update their installations. There are no known workarounds for this vulnerability.