SUSE CVE-2026-33525

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for applications via a web portal. In version 4.39.15, an attacker may potentially be able to inject javascript into the Authelia login page if several conditions are met...

CVE-2026-33525

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for applications via a web portal. In version 4.39.15, an attacker may potentially be able to inject javascript into the Authelia login page if several conditions are met...

CVE-2026-33525

Authelia (github.com/authelia/authelia) is affected by CVE-2026-33525 in version 4.39.15, due to improper neutralization of input during web page generation that could allow JavaScript injection on the login page. The root cause is described as unsafe handling of the langauge cookie value when re...