CVE-2024-37905

概要

参考情報

• goauthentik/authentik release version/2024.2.4 · Release Notes
• goauthentik/authentik release version/2024.4.3 · Release Notes
• goauthentik/authentik release version/2024.6.0 · Release Notes
• goauthentik/authentik security advisory · Vendor Advisory

authentik のその他の脆弱性

• CVE-2026-49448緊急 9.8authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by send…
• CVE-2026-49443高 8.8authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a…
• CVE-2026-47201高 8.5authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is …
• CVE-2026-42849緊急 9.3authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Sim…
• CVE-2026-41569中 6.1authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply para…