CVE-2026-113669
Description
A flaw was found in ApostropheCMS. During cross-host or cross-locale session migration, the application exposes single-use bearer session tokens in redirect Uniform Resource Locators (URLs). An attacker who intercepts or obtains a valid, unconsumed token before the legitimate user can redeem it to hijack the active session. This issue allows unauthorized access to user accounts and session data.
Statement
This vulnerability is judged to have Moderate severity because exploitation requires acquiring and redeeming a short-lived, single-use token before the legitimate client consumes it, restricting the attack window. ApostropheCMS and its passport-bridge integration are not packaged, shipped, or supported across Red Hat Enterprise Linux or any other Red Hat enterprise products. As a result, default Red Hat deployments are not exposed to this flaw.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Files or Directories; Read Memory; Read Application Data
Sensitive data may be exposed to attackers.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
