CVE-2024-13239

Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - mlhess@drupal.org

Published

2025-01-09

Last modified

2025-01-10

Weaknesses

CWE-1390

Affected products

• Two-factor Authentication Tfa (Drupal)
• Two-factor Authentication (Two-factor Authentication Project)

References

• https://www.drupal.org/sa-contrib-2024-003