CVE-2023-49091

CVE-2023-49091 affects Cosmos-server. The vulnerability arises because the authorization header token used for user login remains valid after logout, allowing an attacker to access the application/system even after the user has logged out. Impact is described as high/critical in multiple sources,...