onyx --cves cve-2022-25838

CVE-2022-25838

score: <0.1
cvss: 8.1
epss: 0.9%
published: 2022-02-24
kev added: —
first seen: 2026-10-21

Laravel Fortify before 1.11.1 contains a reuse vulnerability in TOTP implementation caused by insufficient time window validation, letting attackers reuse OTPs within a short period, exploit requires no special privileges.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2022-02-24 Published
2026-10-21 Tracked by Onyx

Weaknesses

CWE-294

References 1

https://github.com/laravel/fortify/issues/201#issuecomment-1009282153