CVE-2023-45659

LowCVSS 2.8/10Last modified Jun 17, 2026

Description

Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixed in the commit `dbb089315ff3d`. Users are advised to update their installations. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.1 2.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-613

Affected software

Vendor	Product	Versions
engelsystem	engelsystem	< dbb089315ff3d

References

https://github.com/engelsystem/engelsystem/commit/dbb089315ff3d8aabc11445e78fb50765208b27dPatch
https://github.com/engelsystem/engelsystem/security/advisories/GHSA-f6mm-3v2h-jm6xExploit, Vendor Advisory
https://github.com/engelsystem/engelsystem/commit/dbb089315ff3d8aabc11445e78fb50765208b27dPatch
https://github.com/engelsystem/engelsystem/security/advisories/GHSA-f6mm-3v2h-jm6xExploit, Vendor Advisory

Timeline

Published: Oct 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-45667.5Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect ser CVE-2023-456604.3Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies al CVE-2023-456617.1stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__CVE-2023-456628.1stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_com CVE-2023-456635.5stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from contex CVE-2023-456648.8stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attem CVE-2023-456669.8stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t give guarantees about CVE-2023-456677.5stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it ret CVE-2023-456695.3WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to impro CVE-2023-456706.8Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the `config/save` and `config/set` endpoints of Frigate do CVE-2023-456714.7Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, there is a reflected cross-site scripting vulnerability in CVE-2023-456727.5Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, an unsafe deserialization vulnerability was identified in