4 matches found
CVE-2025-52553
creationtimestamp| type| source ---|---|--- 2025-06-27 16:57:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19752 2025-06-27 18:51:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmcooxldl23...
CVE-2025-52553 authentik has Insufficient Session verification for Remote Access Control endpoint access
authentik is an open-source identity provider. After authorizing access to a RAC endpoint, authentik creates a token which is used for a single connection and is sent to the client in the URL. This token is intended to only be valid for the session of the user who authorized the connection, howev...
CVE-2025-52553
CVE-2025-52553 affects authentik (open-source identity provider). The vulnerability arises from a session-specific, single-use token generated after authorizing access to a RAC endpoint that is embedded in the URL; the check ensuring the token is valid only for the originating user’s session is m...
CVE-2025-52553 authentik has Insufficient Session verification for Remote Access Control endpoint access
authentik is an open-source identity provider. After authorizing access to a RAC endpoint, authentik creates a token which is used for a single connection and is sent to the client in the URL. This token is intended to only be valid for the session of the user who authorized the connection, howev...