CVE-2025-31681

This module allows a site to setup two factor authentication via QR code using authenticator applications on mobile devices including phones. The mod...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

This module allows a site to setup two factor authentication via QR code using authenticator applications on mobile devices including phones.

The module does not properly protect its custom paths, allowing one user to access a different user's two factor configuration.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Packagist:https://packages.drupal.org/8 drupal/alogin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6"}],"database_specific":{"constraint":"<2.0.6"}}]