Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-103365
HistoryNov 10, 2021 - 12:00 a.m.

Apostrophe licensing issue vulnerability

2021-11-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.005 Low

EPSS

Percentile

75.6%

Apostrophe is a full-featured open source Cms built with Node.js by Apostrophe, Inc. designed to empower organizations by combining contextual editing and headless architecture in a full-stack Js environment.Apostrophe CMS is vulnerable to an authorization issue in versions 2.63.0 through 3.3.1, which stems from a vulnerability caused by session expiration The vulnerability stems from the impact of insufficient sessions, which can be exploited by attackers to hijack recently logged-in user sessions.

0.005 Low

EPSS

Percentile

75.6%

Related for CNVD-2021-103365