CVE-2023-36816

Published July 3rd, 2023

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

2FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Cross site scripting (XSS) injection can be done via the account/service field. This was tested in docker-compose environment. This vulnerability has been patched in version 4.0.3.

Bubka/2FAuth

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

GitHub

3.98K