{"api_version":"1","generated_at":"2026-07-23T12:34:57+00:00","cve":"CVE-2023-48309","urls":{"html":"https://cve.report/CVE-2023-48309","api":"https://cve.report/api/cve/CVE-2023-48309.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-48309","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-48309"},"summary":{"title":"CVE-2023-48309","description":"Description unavailable.","state":"PUBLISHED","assigner":"","published_at":"2023-11-20 19:15:00","updated_at":"2023-11-20 19:18:00"},"problem_types":[],"metrics":[],"references":[{"url":"https://github.com/nextauthjs/next-auth/commit/d237059b6d0cb868c041ba18b698e0cee20a2f10","name":"https://github.com/nextauthjs/next-auth/commit/d237059b6d0cb868c041ba18b698e0cee20a2f10","refsource":"","tags":[],"title":"fix: differentiate between issued JWTs · nextauthjs/next-auth@d237059 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://authjs.dev/guides/basics/role-based-access-control","name":"https://authjs.dev/guides/basics/role-based-access-control","refsource":"","tags":[],"title":"Role-based access control | Auth.js","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://next-auth.js.org/configuration/nextjs#advanced-usage","name":"https://next-auth.js.org/configuration/nextjs#advanced-usage","refsource":"","tags":[],"title":"Next.js | NextAuth.js","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/nextauthjs/next-auth/security/advisories/GHSA-v64w-49xw-qq89","name":"https://github.com/nextauthjs/next-auth/security/advisories/GHSA-v64w-49xw-qq89","refsource":"","tags":[],"title":"Possible user mocking that bypasses basic authentication · Advisory · nextauthjs/next-auth · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://next-auth.js.org/configuration/nextjs#middlewar","name":"https://next-auth.js.org/configuration/nextjs#middlewar","refsource":"","tags":[],"title":"Next.js | NextAuth.js","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-48309","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48309","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"48309","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nextauth.js","cpe5":"next-auth","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"node.js","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2023-48309","qid":"996010","title":"NodeJs (Npm) Security Update for next-auth (GHSA-v64w-49xw-qq89)"}]},"source_records":{"cve_program":null,"nvd":{"publishedDate":"2023-11-20 19:15:00","lastModifiedDate":"2023-11-20 19:18:00","problem_types":[],"metrics":[],"configurations":{"CVE_data_version":"4.0","nodes":[]}},"legacy_mitre":{"record":null,"notes":[]}}}