Lucene search
K

CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix

๐Ÿ—“๏ธย 17 Jun 2025ย 14:31:37Reported byย EEFTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 6ย Views

Insufficient session expiration vulnerability in ash_authentication_phoenix allows session hijacking.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-4754
17 Jun 202514:39
โ€“circl
CNNVD
Ash Authentication Phoenix ไปฃ็ ้—ฎ้ข˜ๆผๆดž
17 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-4754
17 Jun 202514:31
โ€“cve
EUVD
EUVD-2025-18506
3 Oct 202520:07
โ€“euvd
Github Security Blog
ash_authentication_phoenix has Insufficient Session Expiration
17 Jun 202514:20
โ€“github
NVD
CVE-2025-4754
17 Jun 202515:15
โ€“nvd
OSV
CVE-2025-4754
17 Jun 202515:15
โ€“osv
OSV
EEF-CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix
17 Jun 202514:31
โ€“osv
OSV
GHSA-F7GQ-H8JV-H3CQ ash_authentication_phoenix has Insufficient Session Expiration
17 Jun 202514:20
โ€“osv
Positive Technologies
PT-2025-25659 ยท Ash ยท Ash Authentication Phoenix
17 Jun 202500:00
โ€“ptsecurity
Rows per page
[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication_phoenix:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "packageName": "ash_authentication_phoenix",
    "packageURL": "pkg:hex/ash_authentication_phoenix",
    "product": "ash_authentication_phoenix",
    "programFiles": [
      "lib/ash_authentication_phoenix/controller.ex"
    ],
    "repo": "https://github.com/team-alembic/ash_authentication_phoenix",
    "vendor": "ash-project",
    "versions": [
      {
        "lessThan": "2.10.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication_phoenix:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "packageName": "team-alembic/ash_authentication_phoenix",
    "packageURL": "pkg:github/team-alembic/ash_authentication_phoenix",
    "product": "ash_authentication_phoenix",
    "programFiles": [
      "lib/ash_authentication_phoenix/controller.ex"
    ],
    "repo": "https://github.com/team-alembic/ash_authentication_phoenix",
    "vendor": "ash-project",
    "versions": [
      {
        "lessThan": "a3253fb4fc7145aeb403537af1c24d3a8d51ffb1",
        "status": "affected",
        "version": "0",
        "versionType": "git"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation