Two-factor Authentication Project vulnerabilities
We track 3 vulnerabilities in Two-factor Authentication Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2025.
3vulnerabilities
2critical
1high
0exploited
9.2average CVSS score
Latest Two-factor Authentication Project vulnerabilities
- 8.1 High severity
Two-factor Authentication (TFA): Authentication Bypass Using an Alternate Path or Channel
Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0.
- 9.8 Critical severity
Two-factor Authentication (TFA): Session Fixation
Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.
- 9.8 Critical severity
Two-factor Authentication (TFA): Weak Authentication
Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.