Django-mfa2 Project vulnerabilities
We track 1 vulnerability in Django-mfa2 Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Django-mfa2 Project vulnerabilities
- 7.5 High severity
Django-mfa2: Authentication Bypass by Capture-replay
mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage.