Description
Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically deleted from the database. This -Ghost Session- allows revoked users to maintain full unauthorized access to the system. Version 3.22.0 fixes the issue.
CVSS 8.8EPSS 0.294%Risque 0.9
Voir la source- Publication
- 2026-06-08 16:16:42
- Versions concernées
- <3.22.0
- Type
- Core software
- Dernière modification
- 2026-07-23 07:10:00
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H