### [CVE-2024-37905](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37905)
![](https://img.shields.io/static/v1?label=Product&message=authentik&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%202024.2.4%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%202024.4.2%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%202024.6.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%3A%20Improper%20Access%20Control&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-863%3A%20Incorrect%20Authorization&color=brightgreen)

### Description

authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token mechanism can be exploited to gain admin user privileges. A successful exploit of the issue will result in a user gaining full admin access to the Authentik application, including resetting user passwords and more. This issue has been patched in version(s) 2024.2.4, 2024.4.2 and 2024.6.0.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cve-scores