Threats tagged 'drupal-contrib-2025-115'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2025-12760drupal/email_tfa · The Email TFA module provides additional email-based two-factor authentication for Drupal logins Medium5.4EPSS 0.2%2025-11-05GCVE DatabaseCVE-2025-12760 The Email TFA module for Drupal provides email-based two-factor authentication but has a vulnerability where it does not fully protect all login mechanisms in certain scenarios. Exploitation requires the attacker to already have valid user credentials. A fix is available in version 2.0.6. EPSS 0.2%Report on CVE-2025-12760 Vulnerability #drupal-contrib-2025-115 #packagist-https-packages-drupa	GCVE Database	2025-11-05

Page 1 of 1