Security Advisory

CVE-2023-23929

8.8
HIGH

Vulnerability Description

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0.
Published Date March 4, 2023
Official Source NIST NVD Advisory