Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2026/09/17 1:09 p.m.•40 views

CVE-2026-81632 Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

7.2CVSS0.00211EPSS
SaveExploits0References10
OSV
OSV
•added 2026/09/17 1:09 p.m.•11 views

CVE-2026-81632 Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

7.2CVSS5.9AI score0.00211EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•12 views

CVE-2026-81632: Use of GET Request Method With Sensitive Query Strings

Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

7.2CVSS5.9AI score0.00211EPSS
SaveExploits0References2
Rows per page
Query Builder