Medium · 6.5 CVE-2025-27955 EUVD-2025-16679GHSA-f2rq-qhqv-93pg

Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote at…

Published Jun 2, 2025 · Updated Jun 11, 2025 · Assigned by mitre

Description

Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code.

References

https://github.com/intruderlabs/cvex/tree/main/Carestream/session-token-in-url