CVE-2020-5894
On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.
Published: 2020-05-07 · CVSS: Unscored
On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7