Improper Preservation Of Permissions

github.com/authelia/authelia/ is vulnerable to Improper Preservation Of Permissions. The vulnerability is due to a flaw in the implementation of user group management. This can lead to unexpected outcomes like the changes to a user group are not taken into account by access control for longer tha...

Authelia's Group Changes may not have the expected results (YAML file backend)

Impact Under very specific conditions changes to a users groups may not have the expected results. The specific conditions are: The file authentication backend is being used. The watch option is set to true. The refreshinterval is configured to a non-disabled value. The users groups are adjusted ...

GHSA-X883-2VMG-XWF7 Authelia's Group Changes may not have the expected results (YAML file backend)

Impact Under very specific conditions changes to a users groups may not have the expected results. The specific conditions are: The file authentication backend is being used. The watch option is set to true. The refreshinterval is configured to a non-disabled value. The users groups are adjusted ...

The vulnerability of the authelia-bhf package for the operating system on industrial personal computers like TwinCAT/BSD, which allows a hacker to redirect users to arbitrary websites.

The vulnerability of the authelia-bhf package for the TwinCAT/BSD operating system relates to the ability to redirect users to untrusted URLs. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites by sending a specially crafted HTTP request...

CVE-2023-6545

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia...

Open redirect

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia...

CVE-2023-6545 Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia...

CVE-2023-6545

The CVE-2023-6545 entry concerns Beckhoff TwinCAT/BSD’s authelia-bhf package, where an open redirect could allow a remote unauthenticated user to steer a user to an arbitrary site. Affected component is the authelia-bhf fork (Beckhoff). The vulnerability is caused by an open redirect vulnerabilit...

CVE-2023-6545 Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia...

Beckhoff TwinCAT/BSD Input Validation Error Vulnerability

Beckhoff TwinCAT/BSD is a new operating system from Beckhoff Germany. An input validation error vulnerability exists in Beckhoff TwinCAT/BSD authelia-bhf package versions prior to 4.37.5, which originates from a vulnerability that could allow a remote, unprivileged attacker to redirect a user to...

PT-2023-7820 · Beckhoff · Authelia-Bhf +1

Name of the Vulnerable Software and Affected Versions: Beckhoff TwinCAT/BSD affected versions not specified Description: The package authelia-bhf included in Beckhoff's TwinCAT/BSD is prone to an open redirect, allowing a remote unprivileged attacker to redirect a user to another site. This may...

Authelia allows open redirects on the logout endpoint

Impact Utilizing a HTTP query parameter an attacker is able to redirect users from the web application to any domain. The URL of the intended redirect should always be checked for safety prior to forwarding the user. Other endpoints of the web application already do this, they check both that the...

GHSA-36F2-FCRX-FP4J Authelia allows open redirects on the logout endpoint

Impact Utilizing a HTTP query parameter an attacker is able to redirect users from the web application to any domain. The URL of the intended redirect should always be checked for safety prior to forwarding the user. Other endpoints of the web application already do this, they check both that the...

GHSA-68WM-PFJF-WQP6 Authelia vulnerable to an authentication bypassed with malformed request URI on nginx

Impact This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect other proxy servers, but all of the ones we officially suppo...

Authelia vulnerable to an authentication bypassed with malformed request URI on nginx

Impact This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect other proxy servers, but all of the ones we officially suppo...

Improper Authentication

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

The vulnerability of the ngx_http_auth_request_module module in the Authelia authentication and authorization server allows attackers to bypass the authentication mechanism.

The vulnerability of the ngxhttpauthrequestmodule module in the Authelia authentication and authorization server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication mechanism...

Github authelia authorization issue vulnerability

Github authelia is an application from Github USA. An open source authentication and authorization server that provides 2-factor authentication and single sign-on SSO to applications through a web portal. Authelia versions prior to 4.29.3 have an authorization issue vulnerability that allows a...

CVE-2021-32637

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

CVE-2021-32637

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...