SB2023112076 - Improper authentication in NextAuth.js

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2023112076

SB2023112076 - Improper authentication in NextAuth.js

Published: November 20, 2023

Security Bulletin ID SB2023112076
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Improper authentication (CVE-ID: CVE-2023-48309)

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to an error when processing authentication requests. A remote attacker can create an empty/mock user, by getting hold of a NextAuth.js-issued JWT from an interrupted OAuth sign-in flow (state, PKCE or nonce), and bypass authentication process.

Note, this vulnerability does not give access to other users' data, neither to resources that require proper authorization via scopes or other means. The created mock user has no information associated with it (ie. no name, email, access_token, etc.).




Remediation

Install update from vendor's website.

References