Skip to content
Threat Feed
Subscribe

Tag

Cve-2025-71400

1 brief RSS
high advisory

Insecure Direct Object Reference in better-auth passkey

An Insecure Direct Object Reference (IDOR) vulnerability (CVE-2025-71400) in better-auth passkey versions before 1.4.0 allows authenticated users to delete arbitrary passkeys by enumerating IDs.

passkey idor authentication web-application cve-2025-71400
1r 1t 1c