Critical Auth Bypass Found in Better-Auth SCIM
A severe authorization flaw in the better-auth SCIM plugin allows attackers to hijack user accounts and sessions by manipulating provider ID namespaces.
2 results for “scim”
A severe authorization flaw in the better-auth SCIM plugin allows attackers to hijack user accounts and sessions by manipulating provider ID namespaces.
A critical vulnerability in the @better-auth/scim plugin allows authenticated users to hijack accounts via provider ID collisions and bypass security controls.