Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-48044

Authorization bypass when bypass policy condition evaluates to true

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
EEF

Description

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 3.6.3 before 3.7.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ash-project ash

Default version status: unaffected

  • 3.6.3 to < 3.7.1affected
pkg:hex/ash

ash-project ash

Default version status: unaffected

  • 79749c2685ea031ebb2de8cf60cc5edced6a8dd0 to < 8b83efa225f657bfc3656ad8ee8485f9b2de923daffected
pkg:github/ash-project/ash

References