Miniorange

Miniorange 2fa

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2025-6675

  • EPSS 0.04%
  • Veröffentlicht 26.06.2025 13:33:35
  • Zuletzt bearbeitet 14.07.2025 18:10:08

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.8.0, from 5.2.0 before 5.2.1, from 0...

8.8

CVE-2025-47708

  • EPSS 0.03%
  • Veröffentlicht 14.05.2025 17:15:50
  • Zuletzt bearbeitet 10.06.2025 15:25:51

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

6.5

CVE-2025-47709

  • EPSS 0.06%
  • Veröffentlicht 14.05.2025 17:15:50
  • Zuletzt bearbeitet 10.06.2025 15:25:41

Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

7.4

CVE-2025-47710

  • EPSS 0.05%
  • Veröffentlicht 14.05.2025 17:15:50
  • Zuletzt bearbeitet 10.06.2025 15:24:50

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

4.8

CVE-2025-47706

  • EPSS 0.04%
  • Veröffentlicht 14.05.2025 17:15:49
  • Zuletzt bearbeitet 10.06.2025 15:26:04

Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

7.5

CVE-2025-47707

  • EPSS 0.07%
  • Veröffentlicht 14.05.2025 17:15:49
  • Zuletzt bearbeitet 10.06.2025 15:25:56

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.