Threats affecting pkg:composer/ralffreit/mfa-email

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 0.3%	CVE-2026-4208TYPO3 Extension "E-Mail MFA Provider" · Insecure Direct Object Reference High7.7EPSS 0.3%2026-03-17CVE Database V5CVE-2026-4208 The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider. EPSS 0.3%Vulnerability CWE-639	CVE Database V5	2026-03-17

Page 1 of 1