Debian/ruby-devise-two-factor: medium 5.3
As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (and only one) immediately trailing interv
Action: Upgrade ruby-devise-two-factor to 4.0.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.2-1 | - |
Fixed versions
| 4.0.2-1 |
Sources
published · modified · JSON