Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/09/03 7:51 p.m.28 views

CVE-2025-55162 Envoy: oAuth2 Filter Signout route will not clear cookies because of missing "secure;" flag

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0 through 1.33.6, 1.34.0 through 1.34.4 and 1.35.0, insufficient Session Expiration in the Envoy OAuth2 filter leads to failed logout operations. Whe...

6.3CVSS0.0031EPSS
SaveExploits1References2
Rows per page
Query Builder