Executive brief
Authelia allows open redirects on the logout endpoint
Affected products
- Go github.com/authelia/authelia/v4
Junglewise Threat Intelligence
CVE-2021-29456: Authelia allows open redirects on the logout endpoint
CVE-2021-29456 · Severity: low · CVSS 3.1 · Published 2023-03-16
Technologies: github.com/authelia/authelia/v4 (Go). Vendors: Go.
Related threats
- Authelia incorrect authorization via improper domain canonicalization
- Authelia improper username canonicalization in Basic Auth
- GO-2026-4818 - Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting in github.com/authelia/autheli
- GO-2025-3468 - Authelia applies regulation separately to Username-based logins to Email-based logins in github.com/authelia/authelia
- GO-2024-2744 - Access control change may take longer than expected in github.com/authelia/authelia/v4