Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2023/09/19 5:0 p.m.32 views

Pow Mnesia cache doesn't invalidate all expired keys on startup

Use of Pow.Store.Backend.MnesiaCache is susceptible to session hijacking as expired keys are not being invalidated correctly on startup. A cache key may become expired when all Pow.Store.Backend.MnesiaCache instances have been shut down for a period that is longer than the keys' remaining TTL and...

6.5CVSS6.9AI score0.00453EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder