6 matches found
CVE-2023-39522
goauthentik is an open-source Identity Provider. In affected versions using a recovery flow with an identification stage an attacker is able to determine if a username exists. Only setups configured with a recovery flow are impacted by this. Anyone with a user account on a system with the recover...
@goauthentik/web (>=0.0.1 <=0.0.10) potentially affected by CVE-2023-39522 via @goauthentik/api (=2022.8.2-1663409478)
@goauthentik/api NPM version =2022.8.2-1663409478 is affected by a known vulnerability. The following packages have a transitive dependency on @goauthentik/api and may be impacted: - @goauthentik/web =0.0.1, =0.0.10 Source cves: CVE-2023-39522 Source advisory: OSV:GHSA-VMF9-6PCV-XR87...
CVE-2023-39522 Username enumeration attack in goauthentik
goauthentik is an open-source Identity Provider. In affected versions using a recovery flow with an identification stage an attacker is able to determine if a username exists. Only setups configured with a recovery flow are impacted by this. Anyone with a user account on a system with the recover...
CVE-2023-39522 Username enumeration attack in goauthentik
goauthentik is an open-source Identity Provider. In affected versions using a recovery flow with an identification stage an attacker is able to determine if a username exists. Only setups configured with a recovery flow are impacted by this. Anyone with a user account on a system with the recover...
CVE-2023-39522
goauthentik (open‑source Identity Provider) contains a vulnerability in affected versions using a recovery flow with an identification stage that allows an attacker to determine whether a username exists, enabling username/email enumeration. The issue affects setups with the recovery flow and can...
CVE-2023-39522 Username enumeration attack in goauthentik
goauthentik is an open-source Identity Provider. In affected versions using a recovery flow with an identification stage an attacker is able to determine if a username exists. Only setups configured with a recovery flow are impacted by this. Anyone with a user account on a system with the recover...