← All advisories

High severity8.1NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2022-25838

CVE-2022-25838

Description

Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
laravel/fortifyPackagist	< 1.11.1	1.11.1

Affected products

3

Laravel/Fortify
cpe:2.3:a:laravel:fortify:*:*:*:*:*:*:*:*
Range: <1.11.1
Laravel/Fortifydescription
ghsa-coords
pkg:composer/laravel/fortify
Range: < 1.11.1

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-6w4v-qr4m-97ggghsaADVISORY
github.com/laravel/fortify/issues/201nvdIssue TrackingThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2022-25838ghsaADVISORY
github.com/FriendsOfPHP/security-advisories/blob/master/laravel/fortify/CVE-2022-25838.yamlghsaWEB
github.com/laravel/fortify/issues/201ghsaWEB
github.com/laravel/fortify/pull/357ghsaWEB
github.com/laravel/fortify/pull/358ghsaWEB

News mentions

0

No linked articles in our index yet.