PT-2026-81295 · Unknown · Liketrek Trek
CVSS v4.0
6.3
Medium
| Vector | AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X |
Name of the Vulnerable Software and Affected Versions
liketrek TREK versions prior to 3.1.0
Description
An issue in the OIDC Service component within the
findOrCreateUser() function of the server/src/services/oidcService.ts file allows for improper authentication. This flaw can be exploited remotely, although the attack requires a high level of complexity and is considered difficult to execute.Recommendations
Update to version 3.1.0.
Exploit
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Liketrek Trek