Skip to content
OpenAdvisories

Product · Drupal

Two-factor Authentication (TFA)

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-7030

    Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085

    Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0.

    Drupal Two-factor Authentication (TFA) drupal/tfa Packagist