Insecure Session Management

shopware uses insecure session management. The library does not log out user sessions after the user password change using password recovery, allowing an attacker to gain access to the system if an old session token was obtained.