Vulnerabilities > Powauth > POW > 1.0.15

DATE CVE VULNERABILITY TITLE RISK
2023-09-18 CVE-2023-42446 Operation on a Resource after Expiration or Release vulnerability in Powauth POW
Pow is a authentication and user management solution for Phoenix and Plug-based apps.
network
low complexity
powauth CWE-672
6.5
6.5
2020-01-09 CVE-2020-5205 Session Fixation vulnerability in Powauth POW
In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attacks if a persistent session store is used for Plug.Session, such as Redis or a database.
network
low complexity
powauth CWE-384
5.5
5.5