Security Advisory

CVE-2025-4754

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-17 14:31:37
Last updated 2026-05-27 15:40:14
Assigner EEF
State PUBLISHED

Description

Insufficient Session Expiration vulnerability in ash-project ash_authentication_phoenix allows Session Hijacking. This vulnerability is associated with program files lib/ash_authentication_phoenix/controller.ex. This issue affects ash_authentication_phoenix until 2.10.0.