Junglewise Threat Intelligence
CVE-2025-47708: DRUPAL-CONTRIB-2025-054 - The module enables you to add second-factor authentication in addition to the default Drupal login. The module doesn't sufficiently protect
CVE-2025-47708 · Severity: info · Published 2025-05-07
Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Miniorange 2fa. Vendors: Packagist:Https://Packages.Drupal.Org/8.
Executive brief
The module enables you to add second-factor authentication in addition to the default Drupal login.
The module doesn't sufficiently protect certain routes from Cross Site Request Forgery (CSRF) attacks.
Affected products
- packagist:https://packages.drupal.org/8 drupal/miniorange_2fa