News · via CERT/CC
VU#645818: Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting
Overview An authentication bypass vulnerability in the Xerj Console API allows sessions to bypass passkey-backed requirements during token issuance. By exploiting this flaw, an attacker with an…