https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T02:31:56.752849+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-41800 CVE-2024-41800 — Craft CMS Allows TOTP Token To Stay Valid After Use 2026-10-08T02:31:56.915499+00:00

Affected: craftcms cms, craftcms craft_cms

Craft is a content management system (CMS). Craft CMS 5 allows reuse of TOTP tokens multiple times within the validity period. An attacker is able to re-submit a valid TOTP token to establish an authenticated session. This requires that the attacker has knowledge of the victim's credentials. This has been patched in Craft 5.2.3.