Skip to content
OpenAdvisories

Vendor

Apostrophe

2 known vulnerabilities.

Products

Apostrophe 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-25979

    Apostrophe - Insufficient Session Expiration

    Apostrophe CMS versions prior to 3.3.1 did not invalidate existing login sessions when disabling a user account or changing the password, creating a situation in which a device compromised by a third party could not be locked out by those means. As a mitigati…

    Apostrophe Apostrophe apostrophe npm