CVE-2026-59080: JWT Exposure via GET Request in Edito CMS
Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.
The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Exposure is limited to situations where a local attacker can access a victim's browser history while the JWT remains valid. The vendor assessed the likelihood of exploitation as very low.
What does an attacker need to exploit it?
An attacker needs local access to browser history containing a GET request with a valid JWT token. They must use the token before its short validity period expires.
What can an attacker do with a recovered token?
A valid recovered JWT can be used to perform actions on behalf of the victim until the token expires.
Is a vendor fix available or planned?
The vendor determined that a fix is not necessary. No patch or workaround is specified in the provided information.