2 matches found
eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges
Impact In eduMFA = 2.9.1 by adding validity information to the userless challenges. Workarounds No known workarounds besides disabling userless login altogether...
5.8AI score
SaveExploits0References2Affected Software1
GHSA-J5RM-V3VH-VX94 eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges
Impact In eduMFA = 2.9.1 by adding validity information to the userless challenges. Workarounds No known workarounds besides disabling userless login altogether...
8.7CVSS5.8AI score
SaveExploits0References2
20