CWE-1464 vulnerabilities

2 threats

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.7	CVE-2026-123292JetBrains Datalore · Improper Session Invalidation Low2.72026-11-06CVE Database V5CVE-2026-123292 In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid Vulnerability CWE-1464	CVE Database V5	2026-11-06
Medium	6.8	CVE-2026-123283JetBrains Datalore · Improper Session Invalidation Medium6.82026-11-06CVE Database V5CVE-2026-123283 CVE-2026-123283 is a vulnerability in JetBrains Datalore before version 2026.4 that allows account takeover via SSO sign-in to a pre-registered account due to improper session invalidation. The flaw is identified as CWE-1464. It has a CVSS 3.1 base score of 6.8, indicating a medium severity impact with high confidentiality and integrity impact but no availability impact. Vulnerability CWE-1464	CVE Database V5	2026-11-06

Page 1 of 1