Insufficient Session Expiration

Overview edumfa is an eduMFA: identity, multifactor authentication OTP, authorization, audit Affected versions of this package are vulnerable to Insufficient Session Expiration due to missing expiration information in the userless Passkey/WebAuthn challenge process. An attacker can authenticate a...