Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-35W3-6QHC-474V
HistoryMar 29, 2024 - 8:16 p.m.

@workos-inc/authkit-nextjs session replay vulnerability

2024-03-2920:16:00
Google
osv.dev
5
session replay
expired session
header control
security patch

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

JSON

Impact

A user can reuse an expired session by controlling the x-workos-session header.

Patches

Patched in https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2

CPENameOperatorVersion
@workos-inc/authkit-nextjslt0.4.2

Related

veracode 1
cve 1
github 1
osv 1
cvelist 1
veracode
veracode
Session Fixation
2024-04-01 03:29:57
cve
cve
CVE-2024-29901
2024-03-29 16:15:08
github
github
@workos-inc/authkit-nextjs session replay vulnerability
2024-03-29 20:16:00
osv
osv
CVE-2024-29901
2024-03-29 16:15:08
cvelist
cvelist
CVE-2024-29901 @workos-inc/authkit-nextjs session replay vulnerability
2024-03-29 15:23:02

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

JSON
Related for OSV:GHSA-35W3-6QHC-474V
veracode1cve1github1osv1cvelist1