Lucene search
MitreCVELIST:CVE-2022-42731HistoryOct 11, 2022 - 12:00 a.m.
CVE-2022-42731
2022-10-1100:00:00
mitre
www.cve.org
4
django-mfa2
replay attack
device registration
EPSS
0.001
Percentile
34.6%
mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage.
Related
osv
osv
PYSEC-2022-303
2022-10-11 14:15:00
CVE-2022-42731
2022-10-11 14:15:10
django-mfa2 vulnerable to MFA Replay attack
2022-10-11 19:00:29
cve
cve
CVE-2022-42731
2022-10-11 14:15:10
github
github
django-mfa2 vulnerable to MFA Replay attack
2022-10-11 19:00:29
nvd
nvd
CVE-2022-42731
2022-10-11 14:15:10
prion
prion
Design/Logic Flaw
2022-10-11 14:15:00
veracode
veracode
Replay Attack
2022-10-12 10:39:08