3 matches found
CVE-2025-48010 One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0...
CVE-2025-48010 One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0...
CVE-2025-48010
The Drupal One Time Password module is vulnerable to an Authentication Bypass Using an Alternate Path or Channel vulnerability. This flaw allows for a functionality bypass because the module does not sufficiently prevent one-time login links from bypassing Two-Factor Authentication (TFA). This is...