Vulnerabilities > Goauthentik

DATE CVE VULNERABILITY TITLE RISK
2024-01-30 CVE-2024-23647 Improper Authentication vulnerability in Goauthentik Authentik
Authentik is an open-source Identity Provider.
network
low complexity
goauthentik CWE-287
8.8
8.8
2024-01-11 CVE-2024-21637 Cross-site Scripting vulnerability in Goauthentik Authentik
Authentik is an open-source Identity Provider.
network
low complexity
goauthentik CWE-79
5.4
5.4
2023-11-21 CVE-2023-48228 Improper Authentication vulnerability in Goauthentik Authentik
authentik is an open-source identity provider.
network
low complexity
goauthentik CWE-287
critical
 9.8
9.8
2023-10-31 CVE-2023-46249 Missing Authentication for Critical Function vulnerability in Goauthentik Authentik
authentik is an open-source Identity Provider.
network
low complexity
goauthentik CWE-306
critical
 9.8
9.8
2023-08-29 CVE-2023-39522 Information Exposure Through Discrepancy vulnerability in Goauthentik Authentik
goauthentik is an open-source Identity Provider.
network
low complexity
goauthentik CWE-203
5.3
5.3
2023-07-06 CVE-2023-36456 Interpretation Conflict vulnerability in Goauthentik Authentik
authentik is an open-source Identity Provider.
network
low complexity
goauthentik CWE-436
7.3
7.3
2023-03-04 CVE-2023-26481 Insufficient Verification of Data Authenticity vulnerability in Goauthentik Authentik
authentik is an open-source Identity Provider.
network
low complexity
goauthentik CWE-345
6.5
6.5
2022-12-28 CVE-2022-46172 Improper Privilege Management vulnerability in Goauthentik Authentik
authentik is an open-source Identity provider focused on flexibility and versatility.
network
low complexity
goauthentik CWE-269
6.4
6.4
2022-12-28 CVE-2022-23555 Improper Authentication vulnerability in Goauthentik Authentik
authentik is an open-source Identity Provider focused on flexibility and versatility.
network
low complexity
goauthentik CWE-287
8.8
8.8
2022-12-02 CVE-2022-46145 Missing Authentication for Critical Function vulnerability in Goauthentik Authentik
authentik is an open-source identity provider.
network
low complexity
goauthentik CWE-306
critical
 9.8
9.8