CVE-2024-52287 — authentik is an open-source identity provider. When using the client_credentials or device_code OAuth grants, it was possible for an attacker to get a token from authentik with scopes that haven't — CVE Database · The Intelligence Room