Wiki Js
1 CVEs
product
Monthly
Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Wiki Js
NVD
GitHub
CVSS 3.1
9.1
EPSS
0.1%
EPSS 0%
CVSS 9.1
CRITICAL
This Week
Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Wiki Js
NVD
GitHub