authentik vulnerabilities (Bitnami)
45 vulnerabilities.
-
authentikBitnami authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage 8.9 High -
authentikBitnami authentik: Privilege Escalation to Superuser via Group Hierarchy 8.8 High -
authentikBitnami authentik: Stored credentials are readable with view permission alone 8.1 High -
authentikBitnami authentik: Authentication bypass via assertion confusion in SAML sources 7.4 High -
authentikBitnami authentik: Denial of Service via Document Type Declarations in SAML Messages 7.5 High -
authentikBitnami authentik: Account Takeover via SAML NameID Comment Truncation 9.4 Critical -
authentikBitnami authentik: Unauthenticated LDAP directory data disclosure 5.3 Medium -
authentikBitnami authentik RAC: access any endpoint via an unrelated application 8.8 High -
authentikBitnami authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView 8.6 High -
authentikBitnami authentik: SourceStage bypass via empty POST 9.8 Critical -
authentikBitnami authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API 8.8 High -
authentikBitnami authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover 9.3 Critical -
authentikBitnami authentik: WS-Federation wreply origin bypass can exfiltrate signed login responses to attacker-controlled endpoints 6.9 Medium -
authentikBitnami authentik: SAML source does not validate Conditions, timing, or audience on assertions 6.9 Medium -
authentikBitnami authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user 8.5 High -
authentikBitnami authentik: Privilege Escalation via User PATCH: Superuser Group Assignment Bypasses enable_group_superuser 8.1 High -
authentikBitnami authentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/ 7.1 High -
authentikBitnami authentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation 8.7 High -
authentikBitnami authentik has a Signature Verification Bypass via SAML Assertion Wrapping 8.8 High -
authentikBitnami authentik has a forward authentication bypass with broken cookie 8.6 High -
authentikBitnami authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint 9.1 Critical -
authentikBitnami authentik invitation expiry is delayed by at least 5 minutes 5.8 Medium -
authentikBitnami authentik deactivated service accounts can authenticate to OAuth 4.8 Medium -
authentikBitnami authentik has an insufficient check for account active status during OAuth/SAML authentication 7.1 High -
authentikBitnami authentik has Insufficient Session verification for Remote Access Control endpoint access 5.5 Medium -
authentikBitnami authentik's deletion of sessions did not revoke sessions when using database session storage 8.0 High -
authentikBitnami Stored XSS in authentik 4.8 Medium -
authentikBitnami authentik performs insufficient validation of OAuth scopes 6.4 Medium -
authentikBitnami authentik has an insecure default configuration for OAuth2 Redirect URIs 7.9 High -
authentikBitnami authentik allows a timing attack due to missing constant time comparison for metrics view 6.3 Medium -
authentikBitnami authentik cross-provider token validation problems 6.5 Medium -
authentikBitnami authentik vulnerable to password authentication bypass via X-Forwarded-For HTTP header 9.1 Critical -
authentikBitnami authentik has Insufficient Authorization for several API endpoints 7.5 High -
authentikBitnami Insufficient access control for OAuth2 Device Code flow in authentik 8.6 High -
authentikBitnami Improper Access Control and Incorrect Authorization in github.com/goauthentik/authentik 8.8 High -
authentikBitnami PKCE downgrade attack in Authentik 6.5 Medium -
authentikBitnami XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode 7.7 High -
authentikBitnami OAuth2: PKCE can be fully circumvented 7.5 High -
authentikBitnami authentik potential installation takeover when default admin user is deleted 9.7 Critical -
authentikBitnami Username enumeration attack in goauthentik 5.3 Medium -
authentikBitnami Authentik lacks Proxy IP headers validation 8.3 High -
authentikBitnami Insufficient user check in FlowTokens by Email stage 9.1 Critical -
authentikBitnami authentik allows existing authenticated users to create arbitrary accounts 6.4 Medium -
authentikBitnami authentik vulnerable to Improper Authentication via invitation URL token reuse 9.4 Critical -
authentikBitnami authentik vulnerable to unauthorized user creation and potential account takeover 8.1 High