security: fix CVE-2023-26481 (#4832)

fix CVE-2023-26481 Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-03-02 20:15:33 +01:00
parent 040adb8ce7
commit c03a069f02
7 changed files with 81 additions and 11 deletions
--- a/blueprints/example/flows-recovery-email-verification.yaml
+++ b/blueprints/example/flows-recovery-email-verification.yaml
@ -154,6 +154,7 @@ entries:
      policy: !KeyOf default-recovery-skip-if-restored
      target: !KeyOf flow-binding-email
      order: 0
+    state: absent
    model: authentik_policies.policybinding
    attrs:
      negate: false