[CRITICAL] ThinkAdmin Administrator cookies still working after password change

PKSA-pwcm-49dh-tsv6 CVE-2019-11018 GHSA-qv5j-rwq3-m823

Affected package: zoujingli/thinkadmin

Affected version: =4.0

Reported by:
GitHub