com.webauthn4j:webauthn4j-spring-security-metadata (>=0.7.0.release, <=0.9.0.release), com.webauthn4j:webauthn4j-spring-security-test (>=0.7.0.release, <=0.9.0.release) potentially affected by CVE-2023-45669 via com.webauthn4j:webauthn4j-spring-security-core (>=0.7.0.release, <=0.9.0.release)

com.webauthn4j:webauthn4j-spring-security-core MAVEN version =0.7.0.release, =0.7.0.release, =0.7.0.release, =0.9.0.release Source cves: CVE-2023-45669 Source advisory: OSV:GHSA-V9HX-V6VF-G36J...

com.webauthn4j:webauthn4j-spring-security-metadata (>=0.7.0.release, <=0.9.0.release), com.webauthn4j:webauthn4j-spring-security-test (>=0.7.0.release, <=0.9.0.release) potentially affected by CVE-2023-45669 via com.webauthn4j:webauthn4j-spring-security-core (>=0.7.0.release, <=0.9.0.release)

com.webauthn4j:webauthn4j-spring-security-core MAVEN version =0.7.0.release, =0.7.0.release, =0.7.0.release, =0.9.0.release Source cves: CVE-2023-45669 Source advisory: GHSA-V9HX-V6VF-G36J...

CVE-2023-45669

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...

com.webauthn4j:webauthn4j-spring-security-metadata (>=0.7.0.release, <=0.9.0.release), com.webauthn4j:webauthn4j-spring-security-test (>=0.7.0.release, <=0.9.0.release) potentially affected by CVE-2023-45669 via com.webauthn4j:webauthn4j-spring-security-core (>=0.7.0.release, <=0.9.0.release)

com.webauthn4j:webauthn4j-spring-security-core MAVEN version =0.7.0.release, =0.7.0.release, =0.7.0.release, =0.9.0.release Source cves: CVE-2023-45669 Source advisory: MEND:CVE-2023-45669...

CVE-2023-45669: Improper Authentication

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...