1 result · Clear filters · Feed
-
Low 2.3
Missing Session Revocation on Logout in ash_authentication_phoenix
Insufficient Session Expiration vulnerability in team-alembic ash_authentication_phoenix allows a session token captured before sign-out to remain usable afterwards. The default sign_out/2 that AshAuthentication.Phoenix.Controller injects into an application'…