CVE-2023-37919

CVSS V2 None CVSS V3 None

Description

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other device(s) stays logged in without having to verify the account owner's identity. As of time of publication, no known patches or workarounds exist.

Overview

CVE ID
CVE-2023-37919

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2023-07-25T20:42:28.825Z

Last Modified Date
2023-07-25T20:42:28.825Z

Weakness Enumerations

CWE	URL
CWE-613	http://cwe.mitre.org/data/definitions/613.html

References

Reference URL	Reference Tags
https://github.com/calcom/cal.com/security/advisories/GHSA-cpf2-q635-xrwx	x_refsource_CONFIRM

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-37919
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37919

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 00:39:28				Added to TrackCVE