Lucene search

K
osvGoogleOSV:GO-2024-2744
HistoryApr 26, 2024 - 8:05 p.m.

Access control change may take longer than expected in github.com/authelia/authelia/v4

2024-04-2620:05:56
Google
osv.dev
4
github
access control
authelia
authentication backend
ewatch option
refresh interval
user groups

7.2 High

AI Score

Confidence

Low

If the file authentication backend is being used, the ewatch option is set to true, the refresh interval is configured to a non-disabled value, and an administrator changes a user’s groups, then that user may be able to access resources that their previous groups had access to.

7.2 High

AI Score

Confidence

Low