Lucene search
+L

3 matches found

OSV
OSV
added 2026/06/26 9:0 p.m.6 views

GHSA-Q683-8468-R6H6 WebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logs

Impact Webauthn\Bundle\Security\Http\Authenticator\WebauthnAuthenticator logs the full Symfony\Component\HttpFoundation\Request object inside the log context of both onAuthenticationSuccess and onAuthenticationFailure at INFO level: php $this-logger-info'User has been authenticated successfully...

8.7CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder