| Package | Affected versions | Patched versions |
|---|---|---|
| tfa basic plugins | ≥ 7.x-1.0, < 7.x-1.3 | 7.x-1.3 |
An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue affects TFA Basic Plugins: from 7.x-1.0 through 7.x-1.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free