Lucene search
+L

1 matches found

OSV
OSV
•added 2025/06/17 2:31 p.m.•13 views

CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix

Insufficient Session Expiration vulnerability in team-alembic ashauthenticationphoenix allows a session token captured before sign-out to remain usable afterwards. The default signout/2 that AshAuthentication.Phoenix.Controller injects into an application's auth controller only calls...

2.3CVSS5.8AI score0.005EPSS
SaveExploits0References11
Rows per page
Query Builder