Drupal Enterprise MFA Missing Authorization Vulnerability Allowing Forceful Browsing
Vulnerability
A missing authorization vulnerability has been identified in Drupal Enterprise MFA - TFA, versions 0.0.0 prior to 4.7.0 and 5.0.0 prior to 5.2.0. This vulnerability allows for forceful browsing, where users may be able to access restricted resources or functionalities without proper authorization.
Impact
Exploitation of this vulnerability could lead to unauthorized access to resources or functionalities, allowing users to bypass authentication requirements.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.3exploitability
6.2remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.