CraftCMS Plugin - Two-Factor Authentication vulnerabilities

1 known vulnerability in CraftCMS Plugin - Two-Factor Authentication from Born05. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  CraftCMS Plugin - Two-Factor Authentication: Insufficiently Protected Credentials

  CVE-2024-5657Jun 6, 2024Born05

  The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP.