1 matches found
Insecure Token Validation
next-auth is using an insecure token validation. A valid token assigned to one user can be used to sign in as another user when using the Prima adapter in conjunction with the Email provider because an identifier an email address associated with the token is not checked at the time of token...
6.1CVSS2.8AI score0.01667EPSS
SaveExploits1References5Affected Software1
20