En bref
- CVE-2024-28862 est une vulnérabilité MOYENNE (CVSS 5.5) touchant rotp, rotp (rotp project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.18%, plus élevée que 7.2% des vulnérabilités.
- Correctif : mettre à jour vers 6.3.0 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| rotp RubyGems | ≥ 6.2.1, < 6.3.0
| 6.3.0
|
| rotp | ≥ 6.2.1, < 6.3.0
| 6.3.0
|
Description
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
NVD description
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free