Skip to content

Seed passkeys#7265

Draft
MGibson1 wants to merge 2 commits intoarch/cipher-scenefrom
arch/seed-passkeys
Draft

Seed passkeys#7265
MGibson1 wants to merge 2 commits intoarch/cipher-scenefrom
arch/seed-passkeys

Conversation

@MGibson1
Copy link
Member

📔 Objective

Allows for seeding passkeys on login data. They won't work, but neither will any seeded username/passwords.

📸 Screenshots

Generates passkey data from minimal inputs or relying party and username
@github-actions
Copy link
Contributor

github-actions bot commented Mar 19, 2026

Logo
Checkmarx One – Scan Summary & Details5d94d730-7ac8-48bf-a9f9-3da3c0f31e34


New Issues (3) Checkmarx found the following issues in this Pull Request
# Severity Issue Source File / Package Checkmarx Insight
1 MEDIUM CSRF /src/Api/KeyManagement/Controllers/AccountsKeyManagementController.cs: 105
detailsMethod at line 105 of /src/Api/KeyManagement/Controllers/AccountsKeyManagementController.cs gets a parameter from a user request from model. Thi...
Attack Vector
2 MEDIUM CSRF /src/Api/Vault/Controllers/CiphersController.cs: 293
detailsMethod at line 293 of /src/Api/Vault/Controllers/CiphersController.cs gets a parameter from a user request from id. This parameter value flows t...
Attack Vector
3 MEDIUM Use_of_Cryptographically_Weak_PRNG /util/Seeder/Factories/LoginCipherSeeder.cs: 99
detailsMethod at line 99 of /util/Seeder/Factories/LoginCipherSeeder.cs uses a weak method userHandleBytes to produce random values. These values are t...
Attack Vector

Fixed Issues (3) Great job! The following issues were fixed in this Pull Request
Severity Issue Source File / Package
HIGH Path_Traversal /src/Api/Controllers/SelfHosted/SelfHostedOrganizationLicensesController.cs: 56
MEDIUM CSRF /src/Api/Vault/Controllers/CiphersController.cs: 1592
MEDIUM CSRF /src/Api/Vault/Controllers/CiphersController.cs: 1419

@sonarqubecloud
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant