漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085
Vulnerability Description
Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0.
CVSS Information
N/A
Vulnerability Type
特权定义了不安全动作
Vulnerability Title
Drupal Two-factor Authentication 安全漏洞
Vulnerability Description
Drupal Two-factor Authentication是Drupal社区的一个模块。 Drupal Two-factor Authentication 1.11.0之前版本存在安全漏洞,该漏洞源于权限定义不当,可能导致访问控制不当。
CVSS Information
N/A
Vulnerability Type
N/A