https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:32:18.740394+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25970 CVE-2021-25970 — Camaleon CMS - Insufficient Session Expiration after Password Change 2026-10-07T16:32:18.757494+00:00

Affected: camaleon_cms

Camaleon CMS 0.1.7 to 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed.

 https://cve.radiocsirt.org/vuln/ghsa-438x-2p9v-g8h9 GHSA-438x-2p9v-g8h9 — Camaleon CMS Insufficient Session Expiration vulnerability 2026-10-07T16:32:18.757557+00:00

Affected: RubyGems: camaleon_cms

Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed. Resolved in commit `77e31bc6cdde7c951fba104aebcd5ebb3f02b030` which is included in the `2.6.0.1` release.