Skip to content
OpenAdvisories

Package · PyPI

edumfa

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    GHSA-74r7-3mjm-jc5v

    eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check

    ### Impact If the resolver parameter is passed, but the user does not exist, all failcounters of tokens in that resolver will be increased. ### Patches This, along with other issues, was fixed in eduMFA v2.9.1. ### Workarounds Limiting access to `/validate/ch…

    edumfa PyPI
  • Medium 6.8
    GHSA-vhmj-5q9r-mm9g

    BlastRADIUS also affects eduMFA

    ### Summary BlastRADIUS (see blastradius.fail for details) also affects eduMFA prior version 2.2.0, because the Message-Authenticator attributes were not checked. ### Details Website with the vulnerability information blastradius.fail The original vulnerabili…

    edumfa PyPI