medium5.3
CVE-2026-110904
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.
Impact
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.
Affected products
| Product | Affected versions |
|---|---|
| ApostropheCMS | before 4.33.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.