Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
django-mfa2 安全漏洞
Vulnerability Description
django-mfa2是Mohamed El-Kalioby个人开发者的一个处理 MFA 的 Django 应用程序。支持 TOTP、U2F、FIDO2 U2F (Webauthn)、电子邮件令牌和受信任的设备。 django-mfa2 2.5.1 之前版本、2.6.1之前的2.6.x版本存在安全漏洞，该漏洞源于mfa/FIDO2.py允许重放攻击，可用于为用户注册其他设备，设备注册质询在使用后不会失效。
CVSS Information
N/A
Vulnerability Type
N/A