Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-48043

Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
EEF

Description

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 0.1.1 before 3.6.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ash-project ash

Default version status: unaffected

  • 0.1.1 to < 3.6.2affected
pkg:hex/ash

ash-project ash

Default version status: unaffected

  • 4c41344126b0aba09ec3085517000f8aefec299e to < 66d81300065b970da0d2f4528354835d2418c7aeaffected
pkg:github/ash-project/ash

References