CVE-2024-56734

Better Auth is an authentication library for TypeScript. An open redirect vulnerability has been identified in the verify email endpoint of all versions of Better Auth prior to v1.1.6, potentially allowing attackers to redirect users to malicious websites. This issue affects users relying on email verification links generated by the library. The verify email callback endpoint accepts a `callbackURL` parameter. Unlike other verification methods, email verification only uses JWT to verify and redirect without proper validation of the target domain. The origin checker is bypassed in this scenario because it only checks for `POST` requests. An attacker can manipulate this parameter to redirect users to arbitrary URLs controlled by the attacker. Version 1.1.6 contains a patch for the issue.

• CWE-601

• https://github.com/better-auth/better-auth/commit/deb3d73aea90d0468d92723f4511542b593e522fPatch
• https://github.com/better-auth/better-auth/security/advisories/GHSA-8jhw-6pjj-8723Exploit, Mitigation, Vendor Advisory

Published

Dec 30, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-56729In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-5673Vulnerability in Dulldusk's PHP File Manager affecting versi…6.1
• CVE-2024-56730In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-56731Gogs is an open source self-hosted Git service. Prior to ver…9.8
• CVE-2024-56732HarfBuzz is a text shaping engine. Starting with 8.5.0 throu…9.3
• CVE-2024-56733Password Pusher is an open source application to communicate…5.7
• CVE-2024-56736Server-Side Request Forgery (SSRF) vulnerability in Apache H…6.5
• CVE-2024-56737GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer ov…8.8
• CVE-2024-56738GNU GRUB (aka GRUB2) through 2.12 does not use a constant-ti…5.3
• CVE-2024-56739In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5674The Newsletter - API v1 and v2 addon plugin for WordPress is…6.5
• CVE-2024-56740In the Linux kernel, the following vulnerability has been re…7.8