CVE-2025-48010
CVE-2025-48010 · One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.
CVSS 4.8 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
one time password
- Versions
- ≥ 0.0.0, < 1.3.0: Affected (semver)
Update to 1.3.0
drupal/one_time_password Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.3.0
Update to 1.3.0