CVE-2024-56734

creationtimestamp| type| source ---|---|--- 2024-12-30 17:13:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113742892903396443 2024-12-30 19:18:30+00:00| seen| https://t.me/cvedetector/13937 2025-02-25 02:19:27+00:00| seen| https://t.me/cvedetector/18841 2025-03-02 11:45:37+00:00|...

CVE-2024-56734

CVE-2024-56734 affects Better Auth (TypeScript) prior to version 1.1.6, where the verify-email endpoint accepts a callbackURL parameter and uses JWT without proper domain validation. This open-redirect flaw can allow an attacker to redirect users to arbitrary, attacker-controlled sites. Root caus...