https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 17:17:33 +0000 https://db.gcve.eu/vuln/ghsa-q663-qhr3-rj22 <p>Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.</p> <p>The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.</p> <p>Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.</p> <p>The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.</p> https://db.gcve.eu/vuln/ghsa-q663-qhr3-rj22