Two-factor Authentication (Two-factor Authentication Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 22 known versions, newest CVE from 2025-07-08. Vendor: Two-factor Authentication Project.

CVEs of Two-factor Authentication

• CVE-2025-7030 - CVSS 6.5 (medium), 2025-07-08: Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2025-31694 - CVSS 8.1 (high), 2025-03-31: Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA):…
• CVE-2024-13279 - CVSS 9.8 (critical), 2025-01-09: Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from…
• CVE-2024-13239 - CVSS 9.8 (critical), 2025-01-09: Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA):…