CVE-2025-23017
CVSS 3.1 Score 6 of 10 (medium)
Details
Published Feb 24, 2025
CWE ID 305
Summary
CVE-2025-23017 is a vulnerability in WorkOS Hosted AuthKit prior to version 2025-01-07. This issue allows an unauthorized user, who already knows the target user's password, to bypass multi-factor authentication (MFA) by enrolling a new authentication factor. The vulnerability does not involve any exploitation that has occurred.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.