1 matches found
EEF-CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix
Summary Insufficient Session Expiration vulnerability in team-alembic ashauthenticationphoenix allows a session token captured before sign-out to remain usable afterwards. The default signout/2 that AshAuthentication.Phoenix.Controller injects into an application's auth controller only calls...
2.3CVSS5.8AI score0.005EPSS
SaveExploits0References6
20