CVE:CVE-2023-27490
CNNVD:CNNVD-202303-696
NextAuth.js是 Next.js 的身份验证。
NextAuth.js存在授权问题漏洞。攻击者利用该漏洞可以提升权限。
solution:Upgrade nextauth.js next-auth to a higher version than 4.20.1,and avoid the version (,4.20.1)