Two-factor Authentication Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Two-factor Authentication Project records in CISA KEV

No Two-factor Authentication Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Two-factor Authentication 4 records MEDIUM

Records

4 records in Two-factor Authentication · all components

TI-2024-12283 CVE-2024-13239 · GHSA-gqf5-wjqv-v83c

Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-003

MEDIUM 50

Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00576 Published 2025-01-09 Fixed in 1.5.0 CWE-1390

TI-2024-12323 CVE-2024-13279 · GHSA-h6w8-m65g-549g

Two-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-043

MEDIUM 49

Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00472 Published 2025-01-09 Fixed in 1.8.0 CWE-384

TI-2025-22838 CVE-2025-31694 · GHSA-hf6c-fgp3-jfch

Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2025-023

LOW 37

Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.004 Published 2025-03-31 Fixed in 1.10.0 CWE-288

TI-2025-06396 CVE-2025-7030 · GHSA-93j9-6whq-hmr3

Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085

LOW 29

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): fr…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00412 Published 2025-07-08 Fixed in 1.11.0 CWE-267

Open these records in search →

Critical	2
High	1
Medium	1
Low	0
No CVSS	0