Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/05/18 3:35 p.m.31 views

eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check

Impact If the resolver parameter is passed, but the user does not exist, all failcounters of tokens in that resolver will be increased. Patches This, along with other issues, was fixed in eduMFA v2.9.1. Workarounds Limiting access to /validate/check to client applications i.e. Shibboleth/FreeRADI...

5.7AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder