Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

drupal/miniorange_2fa

6 known vulnerabilities (3 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 3 high, 3 medium
Registry
Packagist

Advisories 6

  • CVE-2025-6675Medium 4.8

    Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082

    Affected: fixed in 4.8.0; from 5.0.1, fixed in 5.2.1.

  • Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056

    Affected: fixed in 4.7.0; from 5.0.1, fixed in 5.2.0.

  • CVE-2025-47709Medium 6.5

    Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055

    Affected: fixed in 4.7.0; from 5.0.1, fixed in 5.2.0.

  • Enterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-054

    Affected: fixed in 4.7.0; from 5.0.1, fixed in 5.2.0.

  • Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-053

    Affected: fixed in 4.7.0; from 5.0.1, fixed in 5.2.0.

  • CVE-2025-47706Medium 4.8

    Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-052

    Affected: fixed in 4.7.0; from 5.0.1, fixed in 5.2.0.