TI-2021-12305 CVE-2021-32637 · GHSA-68wm-pfjf-wqp6
Authentication bypassed with malformed request URI
Priority MEDIUM 47
Authelia is a a single sign-on multi-factor portal for web apps.
authelia
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
authelia records in CISA KEVNo authelia vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2021-10169 CVE-2021-29456 · GHSA-36f2-fcrx-fp4j
Authelia allows open redirects on the logout endpoint
Priority LOW 26
Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal.
TI-2026-34791 CVE-2026-47203 · GHSA-hjj4-hfjm-fmrj
Authelia Missing Username Canonicalization in Basic Auth (LDAP)
Priority LOW 15
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.
TI-2025-18523 CVE-2025-24806 · GHSA-m5mf-3963-4x26
Regulation applies separately to Username-based logins to Email-based logins in authelia
Priority LOW 12
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.
TI-2026-36064 CVE-2026-48794 · GHSA-j748-h363-wqj8
Authelia has an Edge Case Access Control Rule Mismatch
Priority LOW 8
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.
TI-2026-25918 CVE-2026-33525 · GHSA-gmfg-3v4q-9qr4
Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting
Priority LOW 4
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.