CVE-2023-48309
1 advisory.
npm/next-auth CVE-2023-48309: medium 5.3
Possible user mocking that bypasses basic authentication
Action: Upgrade next-auth to 4.24.5 or later.
npm i next-auth@4.24.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.24.5 | - |
Fixed versions
| 4.24.5 |
Sources
- osv: GHSA-v64w-49xw-qq89
- https://github.com/nextauthjs/next-auth/security/advisories/GHSA-v64w-49xw-qq89
- https://nvd.nist.gov/vuln/detail/CVE-2023-48309
- https://github.com/nextauthjs/next-auth/commit/d237059b6d0cb868c041ba18b698e0cee20a2f10
- https://authjs.dev/guides/basics/role-based-access-control
- https://github.com/nextauthjs/next-auth
- https://next-auth.js.org/configuration/nextjs#advanced-usage
- https://next-auth.js.org/configuration/nextjs#middlewar
CVE-2023-48309 · published · modified · JSON