Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added yesterday8 views

New API: Admin can reset passkeys for same-level or higher-privileged users

Summary The admin passkey reset endpoint lacked the role-level authorization check used by comparable privileged account-protection endpoints. A lower-privileged administrator could attempt passkey reset operations against same-level or higher-privileged users, including root-level accounts. Impa...

5.1CVSS5.5AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder