Lucene search
+L

2 matches found

OSV
OSV
added 2026/04/16 11:36 p.m.3 views

BIT-AUTHENTIK-2025-29928 authentik's deletion of sessions did not revoke sessions when using database session storage

authentik is an open-source identity provider. Prior to versions 2024.12.4 and 2025.2.3, when authentik was configured to use the database for session storage which is a non-default setting, deleting sessions via the Web Interface or the API would not revoke the session and the session holder wou...

8CVSS5.7AI score0.00364EPSS
SaveExploits0References3
Rows per page
Query Builder