PT-2025-28755

CVE-2025-7030

·

Published

2025-07-02

·

Updated

2025-09-04

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Drupal Two-factor Authentication (TFA) versions 0.0.0 through 1.10.0
Description: The issue affects the two-factor authentication (TFA) mechanism, allowing exploitation of incorrectly configured access control security levels due to a privilege defined with unsafe actions.
Recommendations: For versions 0.0.0 through 1.10.0, update to version 1.11.0 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-267: Privilege Defined With Unsafe Actions
Related identifiers
CVE-2025-7030
DRUPAL-CONTRIB-2025-085
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com