Bludit CMS 3.22.0 Mass Assignment Privilege Escalation via Pages::edit()
Bludit CMS through 3.22.0 contains a mass assignment vulnerability that allows authenticated users with the Author role to modify privileged page fields reserved for administrators by injecting reserved parameters into a content save request. Attackers can submit reserved fields such as type and username through the Pages::edit() function in bl-kernel/pages.class.php, which iterates all fields declared in dbFields without per-field authorization, enabling an Author to convert pages to static site-wide navigation entries or transfer page ownership to arbitrary accounts.
CVE-2026-93364
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-93364
Bludit CMS
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/bludit/bludit",
"vendor": "Bludit",
"product": "Bludit CMS",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "3.22.0"
},
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "4.0.0-beta-1"
},
{
"status": "affected",
"version": "0",
"versionType": "git",
"lessThanOrEqual": "074773eff34b91c002ab9d99029a3edca4934bf1"
}
],
"packageURL": "pkg:github/bludit/bludit",
"defaultStatus": "unknown"
}
]- Related CVEs
- CVE-2026-93364
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #5599 · Revision 1
- Added to Heist Feed
- Publisher date