CVE-2024-37905 | goauthentik prior 2024.2.4/2024.4.2/2024.6.0 API-Access-Token access control (GHSA-c78c-2r9w-p7x4)

A vulnerability classified as critical was found in goauthentik authentik. This vulnerability affects unknown code of the component API-Access-Token Handler. The manipulation leads to improper access controls.

This vulnerability was named CVE-2024-37905. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.