← Database

CVE-2022-25838

HIGH CVSS: 8.1 Published: 2022-02-24 Modified: 2026-06-17

Description

Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept.

Affected Platforms

Laravel Fortify

Weakness Type

CWE-294

References