CVE-2024-29901 — @workos-inc/authkit-nextjs session replay vulnerability
The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js. A user can reuse an expired session by controllin…
Published: 2024-03-29 · CVSS: 4.8 · CVSS 3.1
The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with Next.js. A user can reuse an expired session by controlling the `x-workos-session` header. The vulnerability is patched in v0.4.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7