CVE-2025-13173

Multiple WSO2 products are affected by a vulnerability where session-bound tokens are not automatically revoked upon user session termination. This occurs specifically when the session-bound token feature is enabled with token binding validation and the "Revoke token upon user logout" option is i...