Junglewise Threat Intelligence
CVE-2025-47709: DRUPAL-CONTRIB-2025-055 - The module enables you to add second-factor authentication in addition to the default Drupal login. The module doesn't sufficiently protect
CVE-2025-47709 · Severity: info · Published 2025-05-07
Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Miniorange 2fa. Vendors: Packagist:Https://Packages.Drupal.Org/8.
Executive brief
The module enables you to add second-factor authentication in addition to the default Drupal login.
The module doesn't sufficiently protect certain sensitive routes, allowing an attacker to view or modify various TFA-related settings.
Affected products
- packagist:https://packages.drupal.org/8 drupal/miniorange_2fa