Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•1 views

CVE-2026-81632: Use of GET Request Method With Sensitive Query Strings

Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

7.2CVSS5.9AI score0.00211EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•1 views

CVE-2026-86533: Insufficient Session Expiration

Insufficient Session Expiration vulnerability in team-alembic AshAuthentication and AshAuthentication Phoenix allows a revoked session to remain fully authenticated. A resource configured with sessionidentifier :jti and requiretokenpresenceforauthentication? disabled stores its session value as :...

9.1CVSS5.9AI score0.00908EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-18506

Malicious code in bioql PyPI...

2.3CVSS6.4AI score0.005EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/06/19 3:20 p.m.•12 views

CVE-2025-4754

Insufficient Session Expiration vulnerability in ash-project ashauthenticationphoenix allows Session Hijacking. This vulnerability is associated with program files lib/ashauthenticationphoenix/controller.ex. This issue affects ashauthenticationphoenix until 2.10.0...

2.3CVSS6.5AI score0.005EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/17 3:15 p.m.•19 views

CVE-2025-4754

Insufficient Session Expiration vulnerability in team-alembic ashauthenticationphoenix allows a session token captured before sign-out to remain usable afterwards. The default signout/2 that AshAuthentication.Phoenix.Controller injects into an application's auth controller only calls...

2.3CVSS0.005EPSS
SaveExploits0References6
OSV
OSV
•added 2025/06/17 2:31 p.m.•11 views

CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix

Insufficient Session Expiration vulnerability in team-alembic ashauthenticationphoenix allows a session token captured before sign-out to remain usable afterwards. The default signout/2 that AshAuthentication.Phoenix.Controller injects into an application's auth controller only calls...

2.3CVSS5.8AI score0.005EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•0 views

CVE-2025-4754: Insufficient Session Expiration

Insufficient Session Expiration vulnerability in team-alembic ashauthenticationphoenix allows a session token captured before sign-out to remain usable afterwards. The default signout/2 that AshAuthentication.Phoenix.Controller injects into an application's auth controller only calls...

2.3CVSS5.9AI score0.005EPSS
SaveExploits0References2
Rows per page
Query Builder