CVE-2021-38299
1 advisory.
Packagist/web-auth/webauthn-framework CVE-2021-38299: critical 9.8
Improper Access Control in Webauthn Framework
Action: Upgrade web-auth/webauthn-framework to 3.3.4 or later.
composer require web-auth/webauthn-framework:3.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.3.0 | 3.3.4 | - |
Fixed versions
| 3.3.4 |
Sources
- osv: GHSA-6whf-q6p5-84wg
- https://nvd.nist.gov/vuln/detail/CVE-2021-38299
- https://github.com/web-auth/webauthn-framework/commit/572e239c5702667ca52487faf861abc768a46308
- https://github.com/web-auth/webauthn-framework
- https://github.com/web-auth/webauthn-framework/releases
- https://github.com/web-auth/webauthn-framework/releases/tag/v3.3.4
- https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2021-1-fehlende-ueberpruefung-von-user-presence-in-webauthn-framework
CVE-2021-38299 · published · modified · JSON