CVE-2025-46743

An authenticated user's token could be used by another source after the user had logged out prior to the token expiring...

CVE-2024-57433

The macrozheng mall-tiny scaffolding software version 1.0.1 is vulnerable to Incorrect Access Control (CWE-284) due to a flaw in the logout function . When a user logs out, their session token remains valid and can still be used to fetch information in a logged-in state. As a temporary workaround...