HOMEVULNERABILITIESVENDORSTwo-factor Authentication Project

Two-factor Authentication ProjectCVEs & Vulnerabilities

4 CVEs affecting Two-factor Authentication Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

4 CVEs→ All vendors

Most Affected Products

two-factor authentication 4
CVE-2025-7030MEDIUM

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0.

9 Jul 2025
6.5
CVSS
CVE-2025-31694HIGH

Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0.

1 Apr 2025
8.1
CVSS
CVE-2024-13279CRITICAL

Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.

9 Jan 2025
9.8
CVSS
CVE-2024-13239CRITICAL

Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.

9 Jan 2025
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database