Vulnerability DRUPAL-CONTRIB-2025-055

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
May 07, 2025 at 05:07 PM UTC
No summary available

Details

The module enables you to add second-factor authentication in addition to the default Drupal login.

The module doesn't sufficiently protect certain sensitive routes, allowing an attacker to view or modify various TFA-related settings.

Impacted packages

Timeline

Published
1 year ago
May 07, 2025 at 05:07 PM UTC
Last Modified
28 days ago
September 10, 2026 at 03:46 AM UTC