Popis
Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically deleted from the database. This -Ghost Session- allows revoked users to maintain full unauthorized access to the system. Version 3.22.0 fixes the issue.
CVSS 8.8EPSS 0.294%Riziko 0.9
Zobraziť zdroj- Zverejnené
- 2026-06-08 16:16:42
- Dotknuté verzie
- <3.22.0
- Typ
- Core software
- Posledná úprava
- 2026-07-23 07:10:00
- Vektor
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H