https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:36:20 +0000 https://cve.radiocsirt.org/vuln/cve-2025-4644 <p><strong>Affected:</strong> Payload CMS Payload</p> <p>A Session Fixation vulnerability existed in Payload&#39;s SQLite adapter due to identifier reuse during account creation. A malicious attacker could create a new account, save its JSON Web Token (JWT), and then delete the account, which did not invalidate the JWT. As a result, the next newly created user would receive the same identifier, allowing the attacker to reuse the JWT to authenticate and perform actions as that user.</p> <p>This issue has been fixed in version 3.44.0 of Payload.</p> <p><strong>Affected:</strong> Payload CMS Payload</p> <p>A Session Fixation vulnerability existed in Payload&#39;s SQLite adapter due to identifier reuse during account creation. A malicious attacker could create a new account, save its JSON Web Token (JWT), and then delete the account, which did not invalidate the JWT. As a result, the next newly created user would receive the same identifier, allowing the attacker to reuse the JWT to authenticate and perform actions as that user.</p> <p>This issue has been fixed in version 3.44.0 of Payload.</p> https://cve.radiocsirt.org/vuln/cve-2025-4644