CVE-2023-23929 (published 2023-03-03T23:37:50.748Z)
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0.

Affected products: Vendor: vantage6
Product: vantage6
Versions: < 3.8.0