CVE-2026-123196: falha de alta gravidade em authorizerdev authorizer
Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.4%
Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST gateway to capture reset or magic-link tokens and take over accounts.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
authorizerdev · authorizerCVEs relacionadas — authorizerdev authorizer
No mesmo produto, das mais perigosas para as menos.
Referências
https://github.com/authorizerdev/authorizer/blob/0bceb94f0ab726d9c396202f4d8fbedee1dc9cab/internal/gateway/mount.go#L244-L248https://github.com/authorizerdev/authorizer/blob/0bceb94f0ab726d9c396202f4d8fbedee1dc9cab/internal/grpcsrv/transport/grpc_metadata.go#L40https://github.com/authorizerdev/authorizer/commit/b5012cbcdc7c32dcb4bd43179a212055e7fcb863https://github.com/authorizerdev/authorizer/pull/814https://github.com/authorizerdev/authorizer/releases/tag/2.4.2https://github.com/authorizerdev/authorizer/security/advisories/GHSA-m46m-j9p5-5j99https://www.vulncheck.com/advisories/authorizer-before-2.4.2-password-reset-poisoning-via-x-authorizer-url-grpc-metadata