Drupal One Time Password Authentication Bypass Vulnerability

An authentication bypass vulnerability allowing capture-replay attacks has been identified in the Drupal One Time Password module, versions prior to 1.3.0. This vulnerability enables remote services to exploit stolen credentials.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized access to services or functionalities that require user authentication.