CVEvulnerability
CVE-2021-42948
3.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2022-09-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-319
Description
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
Affected configurations
• digitaldruid hoteldruid (<= 3.0.3)
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- https://github.com/dhammon/HotelDruid-CVE-2021-42948 Third Party Advisory
- https://github.com/dhammon/Security Broken Link
- https://www.hoteldruid.com/ Product, Vendor Advisory
- https://github.com/dhammon/HotelDruid-CVE-2021-42948 Third Party Advisory
- https://github.com/dhammon/Security Broken Link
- https://www.hoteldruid.com/ Product, Vendor Advisory