{"id":"CVE-2019-11018","aliases":[],"url":"https://o3.security/vulnerability/CVE-2019-11018","summary":"application\\admin\\controller\\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.","details":"application\\admin\\controller\\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.","published":"2019-04-08T20:37:08.000Z","modified":"2024-08-04T22:40:15.986Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://github.com/zoujingli/ThinkAdmin/issues/173"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2024-08-04T22:40:15.986Z"}}