14 matches found
EUVD-2022-0873
Malicious code in bioql PyPI...
CVE-2022-25838
Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...
Replay Attack
laravel/fortify is vulnerable to replay attacks. A remote attacker is able to reuse the user's TOTP code within a short time window to gain unauthorized access to the victim's account...
CVE-2022-25838
Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...
CVE-2022-25838
Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...
Design/Logic Flaw
Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...
CVE-2022-25838
Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...
CVE-2022-25838
Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...
CVE-2022-25838
Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...
CVE-2022-25838
Affected Software : Laravel Fortify prior to 1.11.1. Vulnerability : Reuse of a TOTP code within a short time window enables a replay attack, allowing potential unauthorized access to a victim’s account. Root cause : insufficient protection against rapid reuse of one-time codes. Impact : authenti...
PT-2022-17561
Name of the Vulnerable Software and Affected Versions Laravel Fortify versions prior to 1.11.1 Description The issue allows reuse within a short time window, which compromises the one-time nature of the Time-Based One-Time Password TOTP concept. Recommendations For versions prior to 1.11.1, updat...
CVE-2022-25838: Authentication Bypass by Capture-replay
Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...
Laravel Fortify 安全漏洞
Laravel Fortify is a front-end agnostic authentication backend implementation of Laravel from the Laravel community. A security vulnerability exists in Laravel Fortify versions prior to 1.11.1, which stems from software that allows reuse for a short period of time...
