Executive brief
Drupal Two-factor Authentication (TFA) Vulnerable to Forceful Browsing
Affected products
- packagist:https://packages.drupal.org/8 drupal/tfa
- Packagist drupal/tfa
Junglewise Threat Intelligence
CVE-2025-31694: Drupal Two-factor Authentication (TFA) Vulnerable to Forceful Browsing
CVE-2025-31694 · Severity: low · CVSS 3.1 · Published 2025-04-01
Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Tfa. Vendors: Packagist:Https://Packages.Drupal.Org/8, Packagist.
Related threats
- DRUPAL-CONTRIB-2025-085 - This module enables you to allow and/or require a second authentication method in addition to password authentication. The module does not
- DRUPAL-CONTRIB-2024-043 - This module enables you to allow and/or require users to use a second authentication method in addition to password authentication. The mod
- DRUPAL-CONTRIB-2024-003 - This module enables you to allow and/or require users to use a second authentication method in addition to password authentication. In some
- DRUPAL-CONTRIB-2023-030 - This module enables you to allow and/or require users to use a second authentication method in addition to password authentication. The mod