Descrição
Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically deleted from the database. This -Ghost Session- allows revoked users to maintain full unauthorized access to the system. Version 3.22.0 fixes the issue.
CVSS 8.8EPSS 0.294%Risco 0.9
Ver fonte- Publicação
- 2026-06-08 16:16:42
- Versões afetadas
- <3.22.0
- Tipo
- Core software
- Última alteração
- 2026-07-23 07:10:00
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H