Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/03/17 9:31 a.m.•21 views

GHSA-29R8-GVX4-R9W3 Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)

The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider...

8.8CVSS5.9AI score0.00469EPSS
SaveExploits0References6
Rows per page
Query Builder