CVE-2025-6675

Summary: CVE-2025-6675 describes an authentication bypass in the Drupal Enterprise MFA - TFA for Drupal module. The issue allows bypassing authentication via an alternate path or channel. Affected versions include 0.0.0 through 4.8.0, 5.2.0 through 5.2.0, 0.0.0 through 5.0., and 0.0.0 through 5.1...

CVE-2025-47708 Enterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-054

Cross-Site Request Forgery CSRF vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0...

CVE-2025-47707

CVE-2025-47707 affects Drupal Enterprise MFA - TFA for Drupal module. Affected versions include 0.0.0 through 4.6.x and 5.0.0 through 5.1.x, where an Authentication Bypass via an Alternate Path or Channel is reported. The issue is addressed by updates to 4.7.0+ and 5.2.0+. Current sources (e.g., ...