Two Factor Authentication

two-factor_authentication

Vendor: Two Factor Authentication Project • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-7030 1Two Factor Authentication Project 1Two Factor Authentication Jun 17, 2026 Jul 8, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): fr...Show more Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0.Show less
CVE-2025-31694 1Two Factor Authentication Project 1Two Factor Authentication Jun 17, 2026 Mar 31, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0.
CVE-2024-13279 1Two Factor Authentication Project 1Two Factor Authentication Jun 17, 2026 Jan 9, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.
CVE-2024-13239 1Two Factor Authentication Project 1Two Factor Authentication Jun 17, 2026 Jan 9, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.