Security Advisory

CVE-2025-47707

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-14 17:03:02
Last updated 2025-05-15 14:29:37
Assigner drupal
State PUBLISHED

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.