privacyidea/privacyidea

on GitHub

214 releases

new releases every 2 weeks 2 days

last release was 04/09/2024

last checked yesterday at 11:48 PM

1425

:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP Server)

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2018-1000809	October 8, 2018	7.5 HIGH	5 MEDIUM
privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=<space>&pass= to /validate/check url. This vulnerability appears to have been fixed in 2.23.2.