A session fixation vulnerability in Bludit allows an attacker to bypass the server's authentication if they can trick an administrator or any other user into authorizing a session ID of their choosing.

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-24552
• https://www.redguard.ch/blog/2024/06/20/security-advisory-bludit