Lucene search
GoogleOSV:CVE-2024-22206HistoryJan 12, 2024 - 8:15 p.m.
CVE-2024-22206
2024-01-1220:15:47
Google
osv.dev
7
clerk
developers
user management
unauthorized access
privilege escalation
app router
pages router
vulnerability
patched
software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.001
Percentile
28.6%
Clerk helps developers build user management. Unauthorized access or privilege escalation due to a logic flaw in auth() in the App Router or getAuth() in the Pages Router. This vulnerability was patched in version 4.29.3.
Related
veracode
veracode
Insecure Direct Object Reference
2024-01-15 06:40:04
prion
prion
Privilege escalation
2024-01-12 20:15:00
cvelist
cvelist
osv
osv
github
github
nvd
nvd
CVE-2024-22206
2024-01-12 20:15:47
cve
cve
CVE-2024-22206
2024-01-12 20:15:47
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.001
Percentile
28.6%
Related for OSV:CVE-2024-22206