Drupal security advisory (AV24-559)

Serial number: AV24-559
Date: October 3, 2024

On October 2, 2024, Drupal published a security advisory to address a critical vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following product:

• Two-factor Authentication (TFA) module – versions prior to 1.8.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Two-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-043
• Drupal Security Advisories