CVE-2023-25562

DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on new sign-in events and not on logout events. Any authentication checks using the "AuthUtils.hasValidSessionCookie" method could be bypassed by using a cookie from a logged out...