CyberRota Analysis
AI-GeneratedA vulnerability exists in the loginUser function of the Pre-2FA mfa_token Handler in liketrek TREK versions up to 3.0.22, allowing for improper authentication that can be exploited remotely. Organizations using this software should prioritize upgrading to version 3.1.0 to mitigate the risk of unauthorized access. This issue is particularly relevant for system administrators and security teams managing authentication services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser of the file server/src/services/authService.ts of the component Pre-2FA mfa_token Handler. The manipulation results in improper authentication. The attack may be performed from remote. Upgrading to version 3.1.0 is recommended to address this issue. Upgrading the affected component is recommended.