Skip to main content

One Time Password Project

3 CVEs vendor

Monthly

CVE-2025-48012 May 21, 17:15 PHP MEDIUM PATCH Monitor

Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.0.0 before 1.3.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Drupal One Time Password One Time Password Project
NVD
CVSS 3.1
4.8
EPSS
0.1%
CVE-2025-48011 May 21, 17:15 PHP MEDIUM POC PATCH Monitor

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.0.0 before 1.3.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Drupal One Time Password One Time Password Project
NVD
CVSS 3.1
4.8
EPSS
0.1%
CVE-2025-48010 May 21, 17:15 PHP MEDIUM PATCH Monitor

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.0.0 before 1.3.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Drupal One Time Password One Time Password Project
NVD
CVSS 3.1
4.8
EPSS
0.1%
EPSS 0% CVSS 4.8
MEDIUM PATCH Monitor

Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.0.0 before 1.3.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Drupal One Time Password +1
NVD
EPSS 0% CVSS 4.8
MEDIUM POC PATCH Monitor

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.0.0 before 1.3.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Drupal One Time Password +1
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH Monitor

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.0.0 before 1.3.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Drupal One Time Password +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy