{"id":"CVE-2024-21637","aliases":["BIT-authentik-2024-21637","EUVD-2024-19275","GHSA-rjpr-7w8c-gv3j"],"status":"published","title":"XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode","description":"Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connect flows with `response_mode=form_post`. This relatively user could use the described attacks to perform a privilege escalation. This vulnerability has been patched in versions 2023.10.6 and 2023.8.6.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00547,"percentile":0.46173,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2024-01-11T05:49:44Z","modified":"2026-10-28T02:31:00Z","fixes":[{"ecosystem":"Bitnami","package":"authentik","fixed_in":["2023.8.6","2023.10.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"authentik","ranges":[{"type":"SEMVER","events":[{"introduced":"2023.8.0"},{"fixed":"2023.8.6"},{"introduced":"2023.10.0"},{"fixed":"2023.10.6"}]}]}],"products":[{"vendor":"goauthentik","product":"authentik"}],"references":[{"url":"https://github.com/goauthentik/authentik/security/advisories/GHSA-rjpr-7w8c-gv3j","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory","advisory"]},{"url":"https://github.com/goauthentik/authentik/releases/tag/version%2F2023.10.6","tags":["x_refsource_MISC","x_transferred","Patch","fix","web"]},{"url":"https://github.com/goauthentik/authentik/releases/tag/version%2F2023.8.6","tags":["x_refsource_MISC","x_transferred","Patch","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21637","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/21xxx/CVE-2024-21637.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-21637","title":"XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode","description":"Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connect flows with `response_mode=form_post`. This relatively user could use the described attacks to perform a privilege escalation. This vulnerability has been patched in versions 2023.10.6 and 2023.8.6.","status":"published","published":"2024-01-11T05:49:44.123Z","modified":"2025-06-17T21:09:15.907Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:05.077718Z"}],"euvd":[{"id":"EUVD-2024-19275","description":"Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connect flows with `response_mode=form_post`. This relatively user could use the described attacks to perform a privilege escalation. This vulnerability has been patched in versions 2023.10.6 and 2023.8.6.","status":"published","published":"2024-01-11T05:49:44Z","modified":"2025-06-17T21:09:15Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:21.531807Z"}],"nvd":[{"id":"CVE-2024-21637","description":"Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connect flows with `response_mode=form_post`. This relatively user could use the described attacks to perform a privilege escalation. This vulnerability has been patched in versions 2023.10.6 and 2023.8.6.","status":"published","published":"2024-01-11T06:15:43.787Z","modified":"2026-06-17T07:09:53.917Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:30.070039Z"}],"osv":[{"id":"CVE-2024-21637","title":"XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode","description":"Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connect flows with `response_mode=form_post`. This relatively user could use the described attacks to perform a privilege escalation. This vulnerability has been patched in versions 2023.10.6 and 2023.8.6.","status":"published","published":"2024-01-11T05:49:44.123Z","modified":"2026-10-28T02:31:00.371815546Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:44:38.577405Z"},{"id":"BIT-authentik-2024-21637","title":"XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode","description":"Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connect flows with `response_mode=form_post`. This relatively user could use the described attacks to perform a privilege escalation. This vulnerability has been patched in versions 2023.10.6 and 2023.8.6.","status":"published","published":"2026-04-16T23:36:10.878Z","modified":"2026-09-10T16:01:09.295932968Z","updated_at":"2026-11-02T15:28:28.70813Z"}]}}