authelia

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

authelia records in CISA KEV

No authelia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Authelia 3 records MEDIUM

Records

3 records in Authelia · all components

TI-2021-12305 CVE-2021-32637 · GHSA-68wm-pfjf-wqp6

Authentication bypassed with malformed request URI

MEDIUM 47

Authelia is a a single sign-on multi-factor portal for web apps.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01868 Published 2021-05-28 Fixed in 4.29.3 CWE-287

TI-2021-10169 CVE-2021-29456 · GHSA-36f2-fcrx-fp4j

Authelia allows open redirects on the logout endpoint

LOW 26

Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.0051 Published 2021-04-21 Fixed in 4.28.0 CWE-601

TI-2026-25918 CVE-2026-33525 · GHSA-gmfg-3v4q-9qr4

Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting

LOW 4

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.

CVSS 4.0LOW 0.5 Adjacent network No auth User interaction EPSS 0.00237 Published 2026-03-26 Fixed in 4.39.16 CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	4
No CVSS	0