Security Advisory

CVE-2025-48043

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-10 15:57:29
Last updated 2026-07-24 14:14:08
Assigner EEF
CVSS score 8.6
State PUBLISHED

Description

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/authorizer/authorizer.ex and program routines 'Elixir.Ash.Policy.Authorizer':strict_filters/2. This issue affects ash: from 0.1.0 before 3.6.2.