medium4.3
CVE-2026-107268
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless Login allows Forceful Browsing.
Impact
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless Login allows Forceful Browsing. This issue affects Two Factor Authentication - TFA / Passwordless Login versions: from 0.0.0 to 5.4.1, from 5.5.0 to 5.5.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Two Factor Authentication - TFA / Passwordless Login | from 0.0.0 before 5.4.1 from 5.5.0 before 5.5.2 |