In short
- CVE-2024-28862 is a MEDIUM (CVSS 5.5) vulnerability affecting rotp, rotp (rotp project).
- Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 7.2% of all vulnerabilities.
- Fix: update to 6.3.0 or later.
| Package | Affected versions | Patched versions |
|---|
| rotp RubyGems | ≥ 6.2.1, < 6.3.0
| 6.3.0
|
| rotp | ≥ 6.2.1, < 6.3.0
| 6.3.0
|
Description
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
NVD description
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free