5 matches found
Insufficient Session Expiration
Overview lfx is a lfx is a command-line tool for running Langflow workflows. It provides two main commands: serve and run. Affected versions of this package are vulnerable to Insufficient Session Expiration in the logout. An attacker can maintain unauthorized access to a user's session by...
Insufficient Session Expiration
Overview Affected versions of this package are vulnerable to Insufficient Session Expiration in the logout. An attacker can maintain unauthorized access to a user's session by exploiting improper clearing of authentication cookies and tokens after logout. This may allow continued access to...
EUVD-2011-0185
Malware in sbrugna...
PT-2025-6243 · Misskey · Misskey
Name of the Vulnerable Software and Affected Versions: Misskey versions 12.109.0 through 2025.2.0-alpha.0 Description: Misskey is an open source, federated social media platform. A login token named token is stored in a cookie for authentication purposes in Bull Dashboard, but this remains...
PT-2024-20589 · Graylog · Graylog
Name of the Vulnerable Software and Affected Versions: Graylog versions 4.3.0 through 5.1.10 Graylog versions 4.3.0 through 5.2.3 Description: The issue allows reauthenticating with an existing session cookie to re-use that session id, even if for different user credentials. This could be used to...