In breve
- CVE-2024-28862 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda rotp, rotp (rotp project).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.18%, superiore al 7.2% delle vulnerabilità.
- Correzione: aggiornare a 6.3.0 o successiva.
| Package | Affected versions | Patched versions |
|---|
| rotp RubyGems | ≥ 6.2.1, < 6.3.0
| 6.3.0
|
| rotp | ≥ 6.2.1, < 6.3.0
| 6.3.0
|
Description
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
NVD description
The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free