Back to search
CVE-2024-11623
Published: Feb 4, 2025
Modified: Feb 12, 2025
PUBLISHED
Description
Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons. This action could only be performed by an authenticated admin user. The issue was fixed in 2024.10.4 release.
| Vendor | Product | Versions |
|---|---|---|
goauthentik | authentik | affected 0 - < 2024.10.4 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now