Kurz gesagt
- CVE-2024-28862 ist eine Schwachstelle (MITTEL (CVSS 5.5)) in rotp, rotp (rotp project).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.18%, höher als bei 7.2% aller Schwachstellen.
- Abhilfe: auf 6.3.0 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| rotp RubyGems | ≥ 6.2.1, < 6.3.0
| 6.3.0
|
| rotp | ≥ 6.2.1, < 6.3.0
| 6.3.0
|
Description
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
NVD description
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free