CVE-2021-32637

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

CVE-2021-32637

CVE-2021-32637 affects Authelia when used with nginx ngx_http_auth_request_module; a maliciously crafted malformed HTTP request can bypass the authentication mechanism. Public documentation notes that this applies primarily to nginx, while other proxies may not allow malformed URI paths. The root...