CVE-2026-113669: CWE-598: Use of GET Request Method With Sensitive Query Strings in apostrophecms apostrophe
Description
ApostropheCMS versions prior to 4.33.0 and passport-bridge versions prior to 1.6.1 contain a vulnerability where a single-use bearer session token is placed in a redirect URL during cross-host or cross-locale session migration. An attacker who obtains and redeems this token before its first use can hijack the associated session. This issue has been fixed in ApostropheCMS 4.33.0 and passport-bridge 1.6.1.
CVSS v4.0
Score 5.3medium
Affected software
apostrophecms
apostrophe
@apostrophecms
passport-bridge
pkg:github/apostrophecms/apostrophepkg:github/apostrophecms/passport-bridgeRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability (CVE-2026-113669) in ApostropheCMS and passport-bridge involves the use of GET request methods with sensitive query strings containing a single-use bearer session token during cross-host or cross-locale session migration. If an attacker intercepts this token and redeems it before the legitimate user, they can adopt the session associated with that token. This flaw is addressed by updates in ApostropheCMS 4.33.0 and passport-bridge 1.6.1.
Potential Impact
An attacker who obtains the bearer session token from the redirect URL can hijack the user session, potentially gaining unauthorized access to the user's session context. The vulnerability affects session integrity and confidentiality but requires the attacker to intercept the token before its first use.
Mitigation Recommendations
A fix is available and has been released in ApostropheCMS version 4.33.0 and passport-bridge version 1.6.1. Users should upgrade to these versions or later to remediate this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-10-20T14:27:46.642Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad7a9902cdf04f6564bddbf
Added to database: 10/20/2026, 17:49:04 UTC
Last enriched: 10/20/2026, 18:03:21 UTC
Last updated: 10/20/2026, 19:06:08 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.