CVE-2020-23136

MediumCVSS 5.5

Published: 09/11/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

A vulnerability in Microweber v1.1.18 causes the user session not to expire after logout. This allows an attacker to reuse a valid session for unauthorized access.

Risk Assessment

The risk involves potential account takeover by an unauthorized party who gains access to the session, leading to data theft or content manipulation.

Recommendation

Immediately update Microweber to the latest version that fixes this vulnerability. Additionally, implement session invalidation upon logout.

Original NVD description (English source)

Microweber v1.1.18 is affected by no session expiry after log-out.