CVE-2024-28862

The Ruby One Time Password library (ROTP) is an open source library for generating and validating one time passwords. Affected versions had overly permissive default permissions. Users should patch to version 6.3.0. Users unable to patch may correct file permissions after installation.

• CWE-276

• https://github.com/mdp/rotp/security/advisories/GHSA-x2h8-qmj4-g62fVendor Advisory
• https://github.com/mdp/rotp/security/advisories/GHSA-x2h8-qmj4-g62fVendor Advisory

Published

Mar 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28854tls-listener is a rust lang wrapper around a connection list…7.5
• CVE-2024-28855ZITADEL, open source authentication management software, use…6.1
• CVE-2024-28859Symfony1 is a community fork of symfony 1.4 with DIC, form e…9
• CVE-2024-2886Use after free in WebCodecs in Google Chrome prior to 123.0.…7.5
• CVE-2024-28860Cilium is a networking, observability, and security solution…6.8
• CVE-2024-28861Symfony 1 is a community-driven fork of the 1.x branch of Sy…9.8
• CVE-2024-28863node-tar is a Tar for Node.js. node-tar prior to version 6.2…6.5
• CVE-2024-28864SecureProps is a PHP library designed to simplify the encryp…2.6
• CVE-2024-28865django-wiki is a wiki system for Django. Installations of dj…7.5
• CVE-2024-28866GoCD is a continuous delivery server. GoCD versions from 19.…6.1
• CVE-2024-28867Swift Prometheus is a Swift client for the Prometheus monito…7.4
• CVE-2024-28868Umbraco is an ASP.NET content management system. Umbraco 10 …5.3