En resumen
- CVE-2024-5658 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a born05/craft-twofactorauthentication, two-factor authentication (born05).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.59%, mayor que el 48.4% de las vulnerabilidades.
- Solución: actualizar a 3.3.4 o posterior.
Description
The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.
NVD description
The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.
Más vulnerabilidades de born05/craft-twofactorauthentication
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free