CVE-2024-13279

Description

Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.

Reserved 2025-01-09 | Published 2025-01-09 | Updated 2025-01-10 | Assigner drupal

Problem types

CWE-384 Session Fixation

Product status

Default status
unaffected

0.0.0 before 1.8.0
affected

Credits

Francesco Placella finder

Francesco Placella remediation developer

Juraj Nemec remediation developer

Conrad Lara remediation developer

Greg Knaddison coordinator

Juraj Nemec coordinator

References

www.drupal.org/sa-contrib-2024-043

cve.org (CVE-2024-13279)

nvd.nist.gov (CVE-2024-13279)

Download JSON