Passport Bridge
Monthly
ApostropheCMS before 4.33.0 can expose single-use bearer session tokens in cross-host or cross-locale session-migration redirect URLs, letting a low-privileged remote attacker who captures and redeems an unconsumed token before the legitimate client does adopt the associated session. The same token-in-URL pattern affects @apostrophecms/passport-bridge before 1.6.1 in its cross-locale authentication flow. This is a moderate-severity CWE-598 session-handling flaw (assessed CVSS:3.1 5.3, AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L), with no public exploit identified at time of analysis and no CISA KEV confirmation.
ApostropheCMS before 4.33.0 can expose single-use bearer session tokens in cross-host or cross-locale session-migration redirect URLs, letting a low-privileged remote attacker who captures and redeems an unconsumed token before the legitimate client does adopt the associated session. The same token-in-URL pattern affects @apostrophecms/passport-bridge before 1.6.1 in its cross-locale authentication flow. This is a moderate-severity CWE-598 session-handling flaw (assessed CVSS:3.1 5.3, AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L), with no public exploit identified at time of analysis and no CISA KEV confirmation.