FlaviuPopescu/CVE-2022-28601

FlaviuPopescu/CVE-2022-28601

GitHubGitHub
GitHubgithub.com
Releases0
Stars6
A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-28601↗
6.5 MEDIUM4 MEDIUM

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism.