CVE-2025-12760

The Email TFA module provides additional email-based two-factor authentication for Drupal logins. In certain scenarios, the module does not fully pro...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

The Email TFA module provides additional email-based two-factor authentication for Drupal logins.

In certain scenarios, the module does not fully protect all login mechanisms as expected.

This issue is mitigated by the fact that an attacker must already have valid user credentials (username and password) to take advantage of the weakness.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Packagist:https://packages.drupal.org/8 drupal/email_tfa

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6"}],"database_specific":{"constraint":"<2.0.6"}}]

参照URL

web drupal.org