tocsin

Debian/ruby-rodauth: unknown

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in users to authenticate as any other account. Attackers can exploit improper accou

Action: Upgrade ruby-rodauth to 2.46.0-1 or later.

Affected

introducedfixedlast affected
02.46.0-1-

Fixed versions

2.46.0-1

Sources

published · modified · JSON