PT-2025-13840 · Drupal · Drupal Email Tfa
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Drupal Email TFA versions 0.0.0 through 2.0.2
Description
The issue is related to weak authentication in Drupal Email TFA, allowing brute force attacks.
Recommendations
For versions 0.0.0 through 2.0.2, update to version 2.0.3 or later to resolve the issue.
Exploit
Fix
Improper Restriction of Excessive Authentication Attempts
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Drupal Email Tfa