Read the docs

One Time Password Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

One Time Password Project records in CISA KEV

No One Time Password Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
One Time Password 3 records LOW

Records

3 records in One Time Password · all components

TI-2025-30396 CVE-2025-48012 · GHSA-m9wr-pvw8-mgmm

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063

Priority LOW 22

Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.This issue affects One Time Password: from 0.0.0 before 1.3.0.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00261 Published 2025-05-21 Fixed in 1.3.0 CWE-294
TI-2025-30395 CVE-2025-48011 · GHSA-25g9-6gwc-gv6w

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-062

Priority LOW 22

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00321 Published 2025-05-21 Fixed in 1.3.0 CWE-288
TI-2025-30394 CVE-2025-48010 · GHSA-fj3h-m99f-v4q3

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061

Priority LOW 22

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00261 Published 2025-05-21 Fixed in 1.3.0 CWE-288
Open these records in search →