medium6.5
CVE-2025-51306
In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to in…
Impact
In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gatling | Gatling | before 1.25.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gatling.io/products
- https://github.com/Flo354/vulnerabilities/blob/main/gatling-enterprise/CVE-2025-51306-broken-logout.md
- https://github.com/Flo354/vulnerabilities/blob/main/gatling-enterprise/CVE-2025-51306-change-permissions-not-reflected.md
- https://github.com/Flo354/vulnerabilities/tree/main/gatling-enterprise