Threats tagged 'drupal-contrib-2026-305'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-122074Reset password email otp · This module enables you to reset passwords via one time passcode to email Medium2026-11-04GCVE DatabaseCVE-2026-122074 The Drupal module 'reset_password_email_otp' allows password resets via one-time passcodes sent to email or SMS. It contains a vulnerability where it does not properly validate password resets for blocked users. Exploitation requires that the attacker has the ability to unblock the targeted user first, which limits the risk. Vulnerability #drupal-contrib-2026-305 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1