ash_authentication vulnerabilities (Hex)
24 vulnerabilities.
-
ash_authenticationHex AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password change 6.3 Medium -
ash_authenticationHex AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource 6.3 Medium -
ash_authenticationHex AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account 7.6 High -
ash_authenticationHex Session id is not renewed on authentication in ash_authentication, allowing session fixation 7.4 High -
ash_authenticationHex Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement 9.1 Critical -
ash_authenticationHex dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover 9.1 Critical -
ash_authenticationHex OAuth2 sign-in attached to an existing account without an email comparison in AshAuthentication 9.1 Critical -
ash_authenticationHex `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication 9.1 Critical -
ash_authenticationHex Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix 9.1 Critical -
ash_authenticationHex Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix 7.2 High -
ash_authenticationHex Sign-in token minted for one resource accepted by another in AshAuthentication 7.6 High -
ash_authenticationHex Token revocation record built from unverified JWT claims in AshAuthentication 6.9 Medium -
ash_authenticationHex Log injection via an unescaped password reset identity in AshAuthentication 6.3 Medium -
ash_authenticationHex Replayable OAuth2 CSRF state retained after a failed callback in AshAuthentication 2.3 Low -
ash_authenticationHex Magic link single-use tokens replayable via TOCTOU race in AshAuthentication 9.1 Critical -
ash_authenticationHex Confirmation token accepted on any record in AshAuthentication 7.6 High -
ash_authenticationHex Superlinear base62 decoding exhausts CPU and memory in AshAuthentication API key sign-in 8.2 High -
ash_authenticationHex Reversible IP address pseudonymisation in AshAuthentication audit log hash mode 1.8 Low -
ash_authenticationHex Actor record with password digest stored in AshAuthentication audit log entries 1.8 Low -
ash_authenticationHex Purpose-limited JWT accepted as full bearer authentication in AshAuthentication 7.6 High -
ash_authenticationHex Reflected XSS in AshAuthentication confirmation and magic link interaction forms 2.1 Low -
ash_authenticationHex OAuth2/OIDC account takeover in AshAuthentication via email-based user matching 9.2 Critical -
ash_authenticationHex Ash Authentication email link auto-click account confirmation vulnerability 5.3 Medium -
ash_authenticationHex Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install` 6.3 Medium