CyberRota Analysis
AI-GeneratedThe OIDC Service in liketrek TREK versions up to 3.0.22 is vulnerable due to improper authentication in the findOrCreateUser function, which can be exploited remotely, albeit with a high level of complexity. Organizations using this component should prioritize upgrading to version 3.1.0 to mitigate potential security risks associated with this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitability is regarded as difficult. Upgrading to version 3.1.0 is sufficient to resolve this issue. Upgrading the affected component is advised.