• caglararli@hotmail.com
  • 05386281520

CVE-2024-21637 | authentik up to 2023.8.5/2023.10.5 OpenID Connect Flow cross site scripting (GHSA-rjpr-7w8c-gv3j)

Çağlar Arlı      -    18 Views

CVE-2024-21637 | authentik up to 2023.8.5/2023.10.5 OpenID Connect Flow cross site scripting (GHSA-rjpr-7w8c-gv3j)

A vulnerability has been found in authentik up to 2023.8.5/2023.10.5 and classified as problematic. This vulnerability affects unknown code of the component OpenID Connect Flow. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-21637. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.