https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 23:47:16 +0000 https://vulnerability.circl.lu/vuln/cve-2021-43177 <p><strong>Affected:</strong> Tinfoil devise-two-factor</p> <p>As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (and only one) immediately trailing interval. CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)</p> <p><strong>Affected:</strong> Tinfoil devise-two-factor</p> <p>As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (and only one) immediately trailing interval. CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)</p> https://vulnerability.circl.lu/vuln/cve-2021-43177 https://vulnerability.circl.lu/vuln/usn-7050-1 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: ruby-devise-two-factor, Ubuntu:Pro:22.04:LTS: ruby-devise-two-factor</p> <p>Benoit Côté-Jodoin and Michael Nipper discovered that Devise-Two-Factor incorrectly handled one-time password validation. An attacker could possibly use this issue to intercept and re-use a one-time password. (CVE-2021-43177)</p> <p>Garrett Rappaport discovered that Devise-Two-Factor incorrectly handled generating multi-factor authentication codes. An attacker could possibly use this issue to generate valid multi-factor authentication codes. (CVE-2024-8796)</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: ruby-devise-two-factor, Ubuntu:Pro:22.04:LTS: ruby-devise-two-factor</p> <p>Benoit Côté-Jodoin and Michael Nipper discovered that Devise-Two-Factor incorrectly handled one-time password validation. An attacker could possibly use this issue to intercept and re-use a one-time password. (CVE-2021-43177)</p> <p>Garrett Rappaport discovered that Devise-Two-Factor incorrectly handled generating multi-factor authentication codes. An attacker could possibly use this issue to generate valid multi-factor authentication codes. (CVE-2024-8796)</p> https://vulnerability.circl.lu/vuln/usn-7050-1