4 matches found
GHSA-RGMP-4873-R683 Pterodactyl TOTPs can be reused during validity window
Summary When a user signs into an account with 2FA enabled they are prompted to enter a token. When that token is used, it is not sufficiently marked as used in the system allowing an attacker that intercepts that token to then use it in addition to a known username/password during the token...
6.5CVSS6.8AI score0.00361EPSS
SaveExploits0References5
20