📦 Apostrophecms

Apostrophe CMS versions before 3.3.1 fail to invalidate existing login sessions when user accounts are disabled or passwords are changed. This allows compromised sessions to remain active even after a...