Lucene search
+L

1 matches found

OSV
OSV
added 2022/08/01 7:25 p.m.44 views

CVE-2022-31186 Leakage of excessive information into log in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

3.3CVSS4.1AI score0.00256EPSS
SaveExploits0References6
Rows per page
Query Builder