Skip to content
Threat Feed

Tag

Webauthn

1 brief RSS
high advisory

eduMFA Passkey Replay Vulnerability

eduMFA versions prior to 2.9.1 are vulnerable to replay attacks due to a missing expiration flag in userless Passkey/WebAuthn challenges, potentially leading to unauthorized access.

eduMFA replay-attack authentication webauthn
2r