Unverified50% confidenceFactExact time
In 2023, a path traversal vulnerability CVE-2023-39522 in Authentik was disclosed, allowing unauthenticated users to access internal API endpoints.
1
Sources
50%
Confidence
Long-term
Relevance
8/7/2026
First Seen
Sources
端口转发下Authentik安全性解析：自托管服务防护指南
Related Claims
UnverifiedCVE-2026-55040 allows an attacker to achieve remote code execution as an arbitrary user without authentication.62% similarUnverified2021年苹果在USENIX安全会议上发表论文描述了离线查找系统的密码学架构，采用基于椭圆曲线Diffie-Hellman的密钥协商协议59% similarUnverifiedIn 2022, the node-ipc malicious code incident occurred, in which a well-known open-source package was implanted with destructive code58% similarUnverifiedNginx Proxy Manager integrates Let's Encrypt's automatic certificate application and renewal, enabling free HTTPS deployment based on the ACME protocol.58% similarUnverifiedAuthy从设计之初就支持多设备同步和加密云备份，Microsoft Authenticator支持iCloud或Google账户备份57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/704275API
curl https://kongchang.com/api/v1/knowledge/claims/704275MCP
get_claim(id=704275)