Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.drupal.org/sa-contrib-2025-023 |
|
History
Tue, 01 Apr 2025 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-863 |
Tue, 01 Apr 2025 02:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-288 |
Mon, 31 Mar 2025 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0. | |
| Title | Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2025-023 | |
| Weaknesses | CWE-863 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: drupal
Published:
Updated: 2025-04-01T01:36:35.038Z
Reserved: 2025-03-31T21:30:25.064Z
Link: CVE-2025-31694
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-03-31T22:15:22.100
Modified: 2025-04-01T20:26:22.890
Link: CVE-2025-31694
Redhat
No data.