Security Bulletin: next-auth-4.24.3.tgz is vulnerable to CVE-2023-48309 used in IBM Maximo Application Suite - Edge Data Collector

Summary IBM Maximo Application Suite - Edge Data Collector uses next-auth-4.24.3.tgz which is vulnerable to CVE-2023-48309 Vulnerability Details CVEID:CVE-2023-48309 DESCRIPTION: Auth.js next-auth could allow a remote attacker to obtain sensitive information, caused by improper authentication...

CVE-2023-48309

creationtimestamp| type| source ---|---|--- 2023-12-28 02:30:39+00:00| seen| https://t.me/arpsyndicate/2178...

@chirpy-dev/analytics (0.0.1), @chirpy-dev/main-app (>=0.1.0, <=0.3.0) +34 more potentially affected by CVE-2023-48309 via next-auth (>=4.0.0-beta.6, <=4.24.4)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.9, =0.1.0-0, =1.0.0, =1.0.0, =4.0.0-alpha.11, =4.0.0-alpha.1, =4.0.0-alpha.6, =0.6.1, =0.0.0-350929255, =1.11.1-ee257e05.17 and more Source cves: CVE-2023-48309 Source advisory: OSV:GHSA-V64W-49XW-QQ89...