deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-21400
Published: 2025-02-11
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21400
CVE: CVE-2025-21406
Published: 2025-02-11
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21406
CVE: CVE-2025-21407
Published: 2025-02-11
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21407
CVE: CVE-2025-21410
Published: 2025-02-11
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21410
CVE: CVE-2025-21414
Published: 2025-02-11
Description: Windows Core Messaging Elevation of Privileges Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21414
CVE: CVE-2025-21418
Published: 2025-02-11
Description: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21418; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21418
CVE: CVE-2025-21419
Published: 2025-02-11
Description: Windows Setup Files Cleanup Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21419
CVE: CVE-2025-21420
Published: 2025-02-11
Description: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21420
CVE: CVE-2025-24036
Published: 2025-02-11
Description: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24036
CVE: CVE-2025-24039
Published: 2025-02-11
Description: Visual Studio Code Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24039
CVE: CVE-2025-24042
Published: 2025-02-11
Description: Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24042
CVE: CVE-2025-24406
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An unauthenticated attacker could exploit this vulnerability to modify files that are stored outside the restricted directory. Exploitation of this issue does not require user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24407
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low privileged attacker could exploit this vulnerability to perform actions with permissions that were not granted leading to both a High impact to confidentiality and Low impact to integrity. Exploitation of this issue does not require user interaction.
CVSS Score: 7.1 (HIGH)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24408
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sensitive information. Exploitation of this issue does not require user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24409
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11  and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both a High impact to confidentiality and Low impact to integrity. Exploitation of this issue does not require user interaction.
CVSS Score: 8.2 (HIGH)
CWE: CWE-863, CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24410
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24411
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access affecting Confidentiality and Integrity. Exploitation of this issue does not require user interaction.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24412
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24413
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24414
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24415
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24416
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24417
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24418
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
CVSS Score: 8.1 (HIGH)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24419
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to modify select data. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24420
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to modify select data. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24421
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to read select data. Exploitation of this issue does not require user interaction
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24422
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24423
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to modify select data. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24424
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24425
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business Logic Error vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to circumvent intended security mechanisms by manipulating the logic of the application's operations causing limited data modification. Exploitation of this issue does not require user interaction.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-840
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24426
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24427
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24428
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24429
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass allowing read only access. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue requires user interaction.
CVSS Score: 3.5 (LOW)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24430
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this race condition to alter a condition after it has been checked but before it is used, potentially bypassing rate limiting mechanisms. Exploitation of this issue does not require user interaction.
CVSS Score: 3.7 (LOW)
CWE: CWE-367
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24432
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this race condition to alter a condition after it has been checked but before it is used, potentially bypassing rate limiting mechanisms. Exploitation of this issue does not require user interaction.
CVSS Score: 3.7 (LOW)
CWE: CWE-367
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24434
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863, CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24435
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to modify limited fields. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24436
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to view select information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24437
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to view or modify select information. Exploitation of this issue does not require user interaction.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-24438
Published: 2025-02-11
Description: Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-08.html
CVE: CVE-2025-26494
Published: 2025-02-11
Description: Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918
References: https://help.salesforce.com/s/articleView?id=001534936&type=1
CVE: CVE-2025-26495
Published: 2025-02-11
Description: Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://help.salesforce.com/s/articleView?id=000390611&type=1
CVE: CVE-2022-35202
Published: 2025-02-11
Description: A security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non-default) scenarios, to gain access to the private keys used for signing SAML Authn requests. The underlying issue is a Java keystore that may become accessible and downloadable via WebDAV. This keystore is protected with a low-complexity, auto-generated password.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-532
References: https://developer.sitevision.se/archives/release-notes/release-notes/2022-05-06-release-notes-sitevision-10.3; https://www.shelltrail.com/research/how-auto-generated-passwords-in-sitevision-leads-to-signing-key-leakage-cve-2022-35202/
CVE: CVE-2025-25202
Published: 2025-02-11
Description: Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since AshAuthentication v4.1.0 and who have used the magic link strategy _or_ are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. Unless one hase implemented any kind of custom token revocation feature in your application, then one will not be affected. The impact here for users using builtin functionality is that magic link tokens are reusable until they expire. With that said, magic link tokens are only valid for 10 minutes, so the surface area for abuse is extremely low here. The flaw is patched in version 4.4.9. Additionally a compile time warning is shown to users with remediation instructions if they upgrade. 4.4.9 ships with an upgrader, so those who use `mix igniter.upgrade ash_authentication` will have the necessary patch applied. Otherwise, one may run the upgrader manually as described in the error message. As a workaround, delete the generated `:revoked?` generic action in the token resource. This will cause it to use the one internal to Ash Authentication which has always been correct. Alternatively, manually make the changes that are included in the patch.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://github.com/team-alembic/ash_authentication/commit/2dee55252df26fe3d990ff1199397cdcf1bfea8a; https://github.com/team-alembic/ash_authentication/security/advisories/GHSA-qrm9-f75w-hg4c