CVE-2023-45669
1 advisory.
Maven/com.webauthn4j:webauthn4j-spring-security-core CVE-2023-45669: medium 4.8
WebAuthn4J Spring Security Improper signature counter value handling
Action: Upgrade com.webauthn4j:webauthn4j-spring-security-core to 0.9.1.RELEASE or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.1.RELEASE | - |
Fixed versions
| 0.9.1.RELEASE |
Sources
- osv: GHSA-v9hx-v6vf-g36j
- https://github.com/webauthn4j/webauthn4j-spring-security/security/advisories/GHSA-v9hx-v6vf-g36j
- https://nvd.nist.gov/vuln/detail/CVE-2023-45669
- https://github.com/webauthn4j/webauthn4j-spring-security/commit/129700d74d83f9b9a82bf88ebc63707e3cb0a725
- https://github.com/webauthn4j/webauthn4j-spring-security
- https://www.w3.org/TR/2021/REC-webauthn-2-20210408/#sctn-sign-counter
CVE-2023-45669 · published · modified · JSON