CVE-2024-37905

Mô tả

Tham khảo

• goauthentik/authentik release version/2024.2.4 · Release Notes
• goauthentik/authentik release version/2024.4.3 · Release Notes
• goauthentik/authentik release version/2024.6.0 · Release Notes
• goauthentik/authentik security advisory · Vendor Advisory

Lỗ hổng khác của authentik

• CVE-2026-49448NGHIÊM TRỌNG 9.8authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by send…
• CVE-2026-49443CAO 8.8authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a…
• CVE-2026-47201CAO 8.5authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is …
• CVE-2026-42849NGHIÊM TRỌNG 9.3authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Sim…
• CVE-2026-41569TRUNG BÌNH 6.1authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply para…