UNKNOWN Go

Access control change may take longer than expected in github.com/authelia/authelia/v4

GO-2024-2744 · GHSA-x883-2vmg-xwf7

Published · Modified

Description

If the file authentication backend is being used, the ewatch option is set to true, the refresh interval is configured to a non-disabled value, and an administrator changes a user's groups, then that user may be able to access resources that their previous groups had access to.

Ready to move

Start Securing

Free, no credit card | First findings in minutes