The vulnerability of the ProfileBasedRequestOptionsBuilder method in the web authentication library webauthn-lib allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ProfileBasedRequestOptionsBuilder method in the web authentication library webauthn-lib is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Username Enumeration

web-auth/webauthn-framework and web-auth/webauthn-lib are vulnerable to Username Enumeration. The vulnerability is due to the ProfileBasedRequestOptionsBuilder method returning allowedCredentials without any credentials if no username was found. This allows an attacker to enumerate valid username...

CVE-2024-39912: Observable Response Discrepancy

web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications. The ProfileBasedRequestOptionsBuilder method returns allowedCredentials without any credentials if no username was found...