CVE-2024-11623 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons.  This action could only be perform…
Medium CVSS: 4.8

CVE-2024-11623

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons. 
This action could only be performed by an authenticated admin user.
The issue was fixed in 2024.10.4 release.
Vendor
Goauthentik
Product
Authentik
CWE
CWE-79
Yayın Tarihi
2025-02-04 14:15:30
Güncelleme
2025-08-21 18:41:13
Source Identifier
cvd@cert.pl
KEV Date Added
-

Kategoriler

CWE-79 Authentik MEDIUM Goauthentik 2025

Referanslar

https://cert.pl/en/posts/2025/02/CVE-2024-11623/ https://docs.goauthentik.io/docs/security/audits-and-certs/2024-11-cobalt#svg-images-for-icons-possible-xss-vulnerability https://github.com/goauthentik/authentik/pull/12092