💣Exploit CVE-2024-37905 - authentik is an open-source Identity Provider that

[Mental_Outlaw]

CVE ID : CVE-2024-37905
Published : June 28, 2024, 6:15 p.m. | 7 hours, 58 minutes ago
Description : authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token mechanism can be exploited to gain admin user privileges. A successful exploit of the issue will result in a user gaining full admin access to the Authentik application, including resetting user passwords and more. This issue has been patched in version(s) 2024.2.4, 2024.4.2 and 2024.6.0.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.