IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-06-17 15:15

MODIFIED

2025-07-04 10:15

EPSS (Prob. Exploit)

0.50%

Top 56.9%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11 OSV 🔗 2026-11-08

> DESCRIPTION

Insufficient Session Expiration vulnerability in ash-project ash_authentication_phoenix allows Session Hijacking. This vulnerability is associated with program files lib/ash_authentication_phoenix/controller.ex. This issue affects ash_authentication_phoenix until 2.10.0.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-f7gq-h8jv-h3cq LOW

ash_authentication_phoenix has Insufficient Session Expiration

AFFECTED PACKAGES:

ERLANG / ash_authentication_phoenix

<= 2.9.0

Fixed in: 2.10.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Missing Session Revocation on Logout in ash_authentication_phoenix

AFFECTED PACKAGES:

Unknown / Unknown

84 versions affected

ALIASES:

EEF-CVE-2025-4754, GHSA-f7gq-h8jv-h3cq

> HISTORIQUE DES MODIFICATIONS

Première apparition

17/06/2025 15:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 15:05

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui