Tinfoilsecurity / Devise-Two-Factor

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2024-8796	Insufficient Default OTP Shared Secret Length	MEDIUM	6.0	Sep 17, 2024
CVE-2021-43177	As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (…	MEDIUM	5.3	Apr 11, 2022
CVE-2015-7225	Tinfoil Devise-two-factor before 2.0.0 does not strictly follow section 5.2 of RFC 6238 and does not "burn" a successfully validated one-time password (aka OTP…	MEDIUM	5.3	Sep 6, 2017

Rows per page

Showing 1 to 3 of 3 CVEs