AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-37919

MEDIUM · CVSS 6.5 EPSS 0.31% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-37919
Severity
MEDIUM
CVSS
6.5
EPSS
0.31%

Original NVD Description

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other device(s) stays logged in without having to verify the account owner's identity. As of time of publication, no known patches or workarounds exist.