PT-2020-21494

Name of the Vulnerable Software and Affected Versions otpauth versions prior to 3.2.8 Description The issue allows attackers to bypass OTP authentication by providing single digit tokens, as the totp.validate function may return positive values for invalid single digit tokens. Recommendations...