CVE-2024-51752

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In affected versions refresh tokens are logged to the console when the disabled by default `debug` flag, is enabled. This issue has been patched in version 0.13.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS

No CVSS.

Configurations

No configuration.

History

05 Nov 2024, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-05 20:15

Updated : 2024-11-06 18:17


NVD link : CVE-2024-51752

Mitre link : CVE-2024-51752


JSON object : View

Products Affected

No product.

CWE
CWE-532

Insertion of Sensitive Information into Log File