Lucene search
+L

1 matches found

OSV
OSV
•added 2025/06/17 2:31 p.m.•14 views

EEF-CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix

Summary Insufficient Session Expiration vulnerability in team-alembic ashauthenticationphoenix allows a session token captured before sign-out to remain usable afterwards. The default signout/2 that AshAuthentication.Phoenix.Controller injects into an application's auth controller only calls...

2.3CVSS5.8AI score0.005EPSS
SaveExploits0References6
Rows per page
Query Builder