—
DRUPAL-CONTRIB-2025-009
Details
This module allows a site to setup two factor authentication via QR code using authenticator applications on mobile devices including phones.
The module does not properly protect its custom paths, allowing one user to access a different user's two factor configuration.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/alogin
Introduced in:
0Fixed in: 2.0.6Upgrade drupal/alogin to 2.0.6 or newer (ecosystem packagist:https://packages.drupal.org/8).