1 matches found
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
SummaryWith Redis configured, Open WebUI supports JWT revocation: POST /api/v1/auths/signout per-token jti and OIDC back-channel logout per-user revokedat record revocations in Redis, and HTTP auth getcurrentuser rejects revoked tokens with 401. The realtime authentication surfaces do not perform...
7.1CVSS5.5AI score0.00456EPSS
SaveExploits1References7Affected Software1
20