Skip to content
Threat Feed
Subscribe

Product

Http4k-Security-Digest

1 brief RSS
high advisory

Authentication Bypass in http4k-security-digest via Digest URI Replay

The http4k-security-digest library fails to validate the URI parameter in Digest authentication responses, enabling attackers to replay captured authentication credentials against unauthorized endpoints within the same realm.

http4k-security-digest