Lucene search
+L

3 matches found

OSV
OSV
added 2023/09/19 5:0 p.m.24 views

GHSA-3CJH-P6PW-JHV9 Pow Mnesia cache doesn't invalidate all expired keys on startup

Use of Pow.Store.Backend.MnesiaCache is susceptible to session hijacking as expired keys are not being invalidated correctly on startup. A cache key may become expired when all Pow.Store.Backend.MnesiaCache instances have been shut down for a period that is longer than the keys' remaining TTL and...

6.5CVSS6.5AI score0.00453EPSS
SaveExploits1References6
Rows per page
Query Builder