CVE-2024-13239

Description

Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.

Reserved 2025-01-09 | Published 2025-01-09 | Updated 2025-01-10 | Assigner drupal

Problem types

CWE-1390 Weak Authentication

Product status

Default status
unaffected

0.0.0 before 1.5.0
affected

Credits

Ide Braakman finder

Conrad Lara remediation developer

Juraj Nemec remediation developer

João Ventura remediation developer

Damien McKenna coordinator

Greg Knaddison coordinator

Benji Fisher coordinator

Heine coordinator

References

www.drupal.org/sa-contrib-2024-003

cve.org (CVE-2024-13239)

nvd.nist.gov (CVE-2024-13239)

Download JSON