Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/17 9:31 a.m.6 views

GHSA-29R8-GVX4-R9W3 Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)

The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References6
Rows per page
Query Builder