CNNVD-202510-1436 Information
Oct 10, 2025
cve
CNNVD ID
CNNVD-202510-1436
Related CVE
- CNNVD Published: 2025-10-10
Description (Chinese)
Ash Framework是Ash Framework开源的一个用于构建Elixir应用程序的框架。 Ash Framework 3.6.2之前版本存在安全漏洞，该漏洞源于授权不当，可能导致身份验证绕过。
Description (English)
Ash Framework is an open-source framework for the construction of Elixir applications. There was a security loophole in the previous version of Ash Framework 3.6.2, which stemmed from inappropriate delegation of authority and could lead to a circumvention of identification.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Ash Framework
Published
2025-10-10
Last Modified
2026-02-24
References
https://github.com/ash-project/ash/commit/66d81300065b970da0d2f4528354835d2418c7ae https://github.com/ash-project/ash/security/advisories/GHSA-7r7f-9xpj-jmr7
Patch
https://github.com/ash-project/ash/releases
Share on: