Django-mfa2 Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Django-mfa2 Project records in CISA KEV

No Django-mfa2 Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2022-20756 CVE-2022-42731 · GHSA-vw39-2wj9-4q86

MEDIUM 42

mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01507 Published 2022-10-11 Fixed in 2.5.1, 2.6.1 CWE-294