Vulnerability in Ash-Project Ash Authentication Phoenix
CVE-2025-4754
Insufficient Session Expiration vulnerability in ash-project ash_authentication_phoenix allows Session Hijacking. This vulnerability is associated with program files lib/ash_authentication_phoenix/controller.ex. This issue affects ash_authentication_phoenix until 2.10.0.
EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.
Affected products
- Ash-project Ash_authentication_phoenix — versions de3ecd611fb0f3b3f9f861f9397c2a5e97f5f4d2, 1.0.0, 0
Weakness classification (CWE)
References
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)