Amazon · Amazon Cognito · CVE-2024-52311
**Name of the Vulnerable Software and Affected Versions**
Amazon Cognito (affected versions not specified)
**Description**
The issue allows previously authenticated users to continue executing authorized API requests until their authentication token expires, even after logging out. This is because authentication tokens issued via Cognito in data.all are not invalidated on log out.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.