Enterprise MFA - TFA for Drupal vulnerabilities

3 known vulnerabilities in Enterprise MFA - TFA for Drupal from Drupal. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Enterprise MFA - TFA for Drupal: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-47710May 14, 2025Drupal

  Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

• 8.8 High severity

  Enterprise MFA - TFA for Drupal: Cross-Site Request Forgery

  CVE-2025-47708May 14, 2025Drupal

  Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

• 7.5 High severity

  Enterprise MFA - TFA for Drupal: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-47707May 14, 2025Drupal

  Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.