CVE-2025-29928

creationtimestamp| type| source ---|---|--- 2025-03-28 17:45:17+00:00| seen| https://t.me/cvedetector/21438 2025-03-29 12:02:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114245613865183165 2025-03-29 12:02:03+00:00| seen|...

CVE-2025-29928

CVE-2025-29928 concerns authentik, an open-source identity provider. When configured to use database-based session storage (not default), deleting sessions via the Web Interface or API would not revoke those sessions, allowing session holders continued access. This affects authentik versions prio...