Improper Access Control and Incorrect Authorization in github.com/goauthentik/authentik
概要
Improper Access Control and Incorrect Authorization in github.com/goauthentik/authentik
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token mechanism can be exploited to gain admin user privileges. A successful exploit of the issue will result in a user gaining full admin access to the Authentik application, including resetting user passwords and more. This issue has been patched in version(s) 2024.2.4, 2024.4.2 and 2024.6.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
参照URL
- advisory github.com
- web github.com
- web github.com
- web github.com
- web nvd.nist.gov