CVE-2024-52311 — data.all does not invalidate authentication token upon user logout
Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously authenticated user to continue execution of authorized API Requests …
Published: 2024-11-09 · CVSS: 5.3 · CVSS 4.0
Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously authenticated user to continue execution of authorized API Requests until token is expired.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7