Lucene search
+L

2 matches found

OSV
OSV
added 2025/02/11 6:12 p.m.16 views

GHSA-QRM9-F75W-HG4C Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Impact Applications which have been bootstrapped by the new igniter installer since AshAuthentication v4.1.0 and who have used the magic link strategy, password resets, confirmation, or are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. If you did not us...

6.3CVSS6.5AI score0.00306EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2025/02/11 6:12 p.m.16 views

Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Impact Applications which have been bootstrapped by the new igniter installer since AshAuthentication v4.1.0 and who have used the magic link strategy, password resets, confirmation, or are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. If you did not us...

6.5CVSS6.5AI score0.00306EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder