webauthn4j vulnerabilities

Products

• spring security 1
• webauthn4j-spring-security 1

Latest webauthn4j CVEs

Newest publication first

1. CVE-2023-45669 Improper signature counter value handling in webauthn4j-spring-security

   Published 2023-10-16

   Medium·CVSS 5.3 EPSS 0.64%

   WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented sign...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.