Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: One Time Password Project Clear all filters
TI-2025-30396 CVE-2025-48012 · GHSA-m9wr-pvw8-mgmm

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063

Priority LOW 22

Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.This issue affects One Time Password: from 0.0.0 before 1.3.0.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00261 Published 2025-05-21 Fixed in 1.3.0 CWE-294
TI-2025-30395 CVE-2025-48011 · GHSA-25g9-6gwc-gv6w

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-062

Priority LOW 22

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00321 Published 2025-05-21 Fixed in 1.3.0 CWE-288
TI-2025-30394 CVE-2025-48010 · GHSA-fj3h-m99f-v4q3

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061

Priority LOW 22

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00261 Published 2025-05-21 Fixed in 1.3.0 CWE-288