Known vulnerabilities in authentik - page 2

Vendor: Authentik Security Inc
Software: authentik
Software CPE: cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*
Website: https://goauthentik.io/
Total vulnerabilities: 42
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting authentik authentik is affected by 42 known vulnerabilities: 16 high, 14 medium, 12 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118625 - Operation on a Resource after Expiration or Release
CVE-2025-64708		 CWE-672 Medium
No
No
 2025.8.5, 2025.10.2 19.11.2025 SB2025111950
#VU113196 - Improper Privilege Management
CVE-2025-53942		 CWE-269 High
No
No
 2025.4.4, 2025.6.4 24.07.2025 SB2025072428
#VU112089 - Improper Authentication
CVE-2025-52553		 CWE-287 Medium
No
No
 2025.4.3, 2025.6.3 01.07.2025 SB2025070175
#VU106383 - Session Fixation
CVE-2025-29928		 CWE-384 High
No
No
 2024.12.4, 2025.2.3 02.04.2025 SB2025040215
#VU127136 - Improper Authorization
CVE-2024-52287		 CWE-285 Low
No
No
 2024.8.5, 2024.10.3 21.11.2024 SB2024112180
#VU127135 - Incorrect Regular Expression
CVE-2024-52289		 CWE-185 High
No
No
 2024.8.5, 2024.10.3 21.11.2024 SB2024112180
#VU127134 - Information Exposure Through Timing Discrepancy
CVE-2024-52307		 CWE-208 Medium
No
No
 2024.8.5, 2024.10.3 21.11.2024 SB2024112180
#VU127137 - Improper Authentication
CVE-2024-47070		 CWE-287 High
No
No
 2024.6.5, 2024.8.3 27.09.2024 SB2024092798
#VU127138 - Incorrect Authorization
CVE-2024-47077		 CWE-863 Low
No
No
 2024.6.5, 2024.8.3 27.09.2024 SB2024092798
#VU96500 - Improper Authorization
CVE-2024-42490		 CWE-285 High
No
No
 2024.4.4, 2024.6.4 26.08.2024 SB2024082606
#VU127139 - Improper Authorization
CVE-2024-38371		 CWE-285 High
No
No
 2024.2.4, 2024.4.3, 2024.6.0 26.06.2024 SB20240626100
#VU127140 - Incorrect Authorization
CVE-2024-37905		 CWE-863 Medium
No
No
 2024.2.4, 2024.4.3, 2024.6.0 26.06.2024 SB20240626100
#VU85890 - Improper Access Control
CVE-2024-23647		 CWE-284 Medium
No
No
 2023.8.7, 2023.10.7 30.01.2024 SB2024013010
#VU85239 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-21637		 CWE-601 Low
No
No
 2023.8.6, 2023.10.6 09.01.2024 SB2024010996
#VU83471 - Security Features
CVE-2023-48228		 CWE-254 High
No
No
 2023.8.5, 2023.10.4 24.11.2023 SB2023112429
#VU127141 - Improper Access Control
CVE-2023-46249		 CWE-284 High
No
No
 2023.8.4, 2023.10.2 28.10.2023 SB2023102810
#VU127142 - Observable Response Discrepancy
CVE-2023-39522		 CWE-204 Medium
No
No
 2023.5.6, 2023.6.2 29.08.2023 SB2023082958
#VU127143 - Improper input validation
CVE-2023-36456		 CWE-20 High
No
No
 2023.4.3, 2023.5.5 06.07.2023 SB2023070638
#VU127144 - Insufficient Verification of Data Authenticity
CVE-2023-26481		 CWE-345 Low
No
No
 2022.12.3, 2023.1.3, 2023.2.3 02.03.2023 SB2023030260
#VU127145 - Improper Access Control
CVE-2022-46172		 CWE-284 Low
No
No
 2022.10.4, 2022.11.4 23.12.2022 SB2022122329


Showing elements 21 - 40 out of 42