PRIOn knowledge basePRION:CVE-2024-22206

HistoryJan 12, 2024 - 8:15 p.m.

Privilege escalation

2024-01-1220:15:00

PRIOn knowledge base

www.prio-n.com

clerk

developers

user management

unauthorized access

vulnerability

patched

version 4.29.3

nvd

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

JSON

Clerk helps developers build user management. Unauthorized access or privilege escalation due to a logic flaw in auth() in the App Router or getAuth() in the Pages Router. This vulnerability was patched in version 4.29.3.

CPENameOperatorVersion
javascriptge4.7.0
javascriptlt4.29.3

CPE	Name	Operator	Version
	javascript	ge	4.7.0
	javascript	lt	4.29.3

References

clerk.com/changelog/2024-01-12

github.com/clerk/javascript/releases/tag/%40clerk%2Fnextjs%404.29.3

github.com/clerk/javascript/security/advisories/GHSA-q6w5-jg5q-47vg