⤷ Title: Broken Session Revocation: Proving That Logout Doesn’t Actually Log You Out
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:49:42 GMT
════════════════════════
⌗ Tags: #session_expiration #improper_authentication #bug_bounty #broken_session_revocation
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:49:42 GMT
════════════════════════
⌗ Tags: #session_expiration #improper_authentication #bug_bounty #broken_session_revocation
Medium
Broken Session Revocation: Proving That Logout Doesn’t Actually Log You Out
CWE-613: Insufficient Session Expiration CWE-287: Improper Authentication CVSS 3.1: 8.1 (High) — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N