Session Remains Valid After Logout

Affected Site

Testing was performed against a website hosted on the Graphy platform.

Finding

Previously issued session cookies remained valid after logout and could be reused to access authenticated resources.

Vendor Response

Graphy Support stated that the matter had been escalated to the concerned team for investigation and resolution.

Disclosure Status

The finding was escalated to the concerned team for investigation and resolution.

Status: Remediation / coordination