GHSA-9jrw-jrrj-p6fr
Drupal Email TFA allows Functionality Bypass
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | drupal/email_tfa | < 2.0.6 | 2.0.6 |
Details
As written in the advisory (Markdown source, shown as plain text).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass. This issue affects Email TFA: from 0.0.0 before 2.0.6.
References
External links from the advisory. They lead to third-party sites.