CVE-2025-12760
Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-115
Résumé
Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-115
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/email_tfa
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6"}],"database_specific":{"constraint":"<2.0.6"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org