GHSA-6w4v-qr4m-97ggHighCVSS 8.1

Multi-Factor Authentication issue in Laravel Fortify

Published
February 25, 2022
Last Modified
March 15, 2023

🔗 CVE IDs covered (1)

CVE-2022-25838 →

📋 Description

Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept.

🎯 Affected products1

  • composer/laravel/fortify:< 1.11.1

🔗 References (7)