Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-26037

[20210703] - Core - Lack of enforced session termination

Description

An issue was discovered in Joomla! 2.5.0 through 3.9.27. CMS functions did not properly termine existing user sessions when a user's password was changed or the user was blocked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

  • 2.5.0-3.9.27affected

References