Skip to content
OpenAdvisories

Package · Packagist

drupal/tfa

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 6.5
    CVE-2025-7030

    Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085

    Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0.

    Drupal Two-factor Authentication (TFA) drupal/tfa Packagist
  • High 8.1
    CVE-2025-31694

    Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2025-023

    Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0.

    Drupal Two-factor Authentication (TFA) drupal/tfa Packagist
  • Critical 9.8
    CVE-2024-13279

    Two-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-043

    Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.

    Drupal Two-factor Authentication (TFA) drupal/tfa Packagist
  • Critical 9.8
    CVE-2024-13239

    Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-003

    Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.

    Drupal Two-factor Authentication (TFA) drupal/tfa Packagist
  • Unscored —
    DRUPAL-CONTRIB-2023-030

    This module enables you to allow and/or require users to use a second authentication method in addition to password aut…

    drupal/tfa Packagist