Lucene search
+L

5 matches found

Cvelist
Cvelist
added 2023/09/18 9:29 p.m.54 views

CVE-2023-42446 Pow Mnesia cache doesn't invalidate all expired keys on startup

Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34, use of Pow.Store.Backend.MnesiaCache is susceptible to session hijacking as expired keys are not being invalidated correctly on startup. A session may expi...

6.5CVSS6.9AI score0.00547EPSS
SaveExploits1References2
Rows per page
Query Builder