-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from incomplete session invalidation during logout. The patch adds 'RemoveAdminUserCacheInfo' to the logout flow, indicating the original UserLogout function in user_controller.go only cleared regular user cache (via RemoveUserCacheInfo) but not admin privileges cache. This left admin access tokens valid after logout, creating insufficient session expiration. The direct correlation between the CWE-613 description, commit message about admin cache removal, and the specific code change in the logout handler provides high confidence in this assessment.
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/answerdev/answer | go | < 1.0.6 | 1.0.6 |
Ongoing coverage of React2Shell