Bug Signature counter is not validated when validating passkey signature

  • Thread starter Thread starter Kirby
  • Start date Start date
There is a bug in this version
K

Kirby

Guest
When validating a passkey signature in \XF\Service\Passkey\Manager::validate() the signature counter is not checked.

Suggested Fix
Store the signature counter in entity Passkey after each successful validation and validate it when validating a passkey signature.

Continue reading...
 
You must log in or register to reply here.
Top Bottom
Back