CVE-2025-47710

creationtimestamp| type| source ---|---|--- 2025-05-14 17:32:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16338 2025-05-14 18:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5oizoinm2j...

CVE-2025-47710 Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0...

CVE-2025-47710

The Drupal Enterprise MFA - TFA for Drupal module is vulnerable to an Authentication Bypass Using an Alternate Path or Channel (CWE-288). The root cause is that the module fails to sufficiently ensure that known login routes are protected. This allows an attacker to bypass authentication mechanis...