A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

AccountController incorrectly call sign out on all schemes

Fixed in

EPiServer.CMS.UI 12.25.1

(Or a related package)

Created

Aug 02, 2023

Updated

Dec 25, 2023

Area

CMS UI

State

Closed, Fixed and tested


Description

Fixed an issue where logout was unsuccessful because AccountController.SignOutAsync attempted to sign out of all registered schemes, even though the authentication handlers of some schemes do not support sign-out.