CVE-2024-29901
@workos-inc/authkit-nextjs session replay vulnerability
Résumé
@workos-inc/authkit-nextjs session replay vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js.
A user can reuse an expired session by controlling the x-workos-session header. The vulnerability is patched in v0.4.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com