CVE-2024-11623

概要

参考情報

• cert.pl/en/posts/2025/02/CVE-2024-11623 · Third Party Advisory
• docs.goauthentik.io/docs/security/audits-and-certs/2024-11-cobalt · Vendor Advisory
• goauthentik/authentik#12092 · Issue Tracking

authentik のその他の脆弱性

• CVE-2026-49448緊急 9.8authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by send…
• CVE-2026-49443高 8.8authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a…
• CVE-2026-47201高 8.5authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is …
• CVE-2026-42849緊急 9.3authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Sim…
• CVE-2026-41569中 6.1authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply para…