Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x2h8-qmj4-g62f

Опубликовано: 18 мар. 2024
Источник: github
Github: Прошло ревью
CVSS3: 5.3

Описание

ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.

The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.

Пакеты

Наименование

rotp

rubygems
Затронутые версииВерсия исправления

>= 6.2.1, < 6.3.0

6.3.0

EPSS

Процентиль: 15%
0.00047
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 2 года назад

The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.

CVSS3: 5.3
nvd
почти 2 года назад

The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.

CVSS3: 5.3
debian
почти 2 года назад

The Ruby One Time Password library (ROTP) is an open source library fo ...

EPSS

Процентиль: 15%
0.00047
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-276