CyberRota Analysis
AI-GeneratedThe Better Auth library for TypeScript is vulnerable in versions prior to 1.6.11 and in 1.6.14 and later under specific configurations, allowing users with unverified sessions to accept organization invitations using invitation IDs. This flaw compromises the integrity of the invitation process, potentially enabling unauthorized access to organizational resources. Organizations utilizing this library should prioritize updating to version 1.6.11 or later and ensure secure configurations to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when invitation IDs can be obtained outside the invited mailbox and requireEmailVerificationOnInvitation: true is not enabled, the organization plugin's acceptInvitation, rejectInvitation, getInvitation, and listUserInvitations recipient endpoints use session.user.email and an invitation ID without sufficient verified-email ownership proof, allowing a user with an unverified session for the invited email address to accept an organization invitation after obtaining the invitation ID. This issue is fixed for the original default behavior in version 1.6.11, while 1.6.14 restored compatibility for built-in opaque invitation IDs and leaves affected configurations requiring secure options.
Related CVEs
Other vulnerabilities affecting the same vendor(s)