two-factor authentication project vulnerabilities

Recent CVEs affecting two-factor authentication project products. 4 tracked.

two-factor authentication project has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-07-08. Highest priority: CVE-2024-13239 (score 51/100).

• CVE-2025-7030 MEDIUM 6.5 UPGRADE Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploitin
• CVE-2025-31694 HIGH 8.1 UPGRADE Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This
• CVE-2024-13279 CRITICAL 9.8 UPGRADE Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue af
• CVE-2024-13239 CRITICAL 9.8 UPGRADE Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This i

FAQ

How do I fix two-factor authentication project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is two-factor authentication project being exploited right now?

None of the tracked two-factor authentication project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which two-factor authentication project CVE should I patch first?

CVE-2024-13239 currently ranks highest (51/100): Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This i.

Products

• two-factor authentication

RSS feed for two-factor authentication project · ← Back to latest CVEs