roelvanhintum/craft-twofactorauthentication

Releases69

Frequency1 month 1 week

Last Release almost 2 years ago

Stars36

Craft plugin for two-factor or two-step login using Time Based OTP.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-5657 ↗	Jun 6, 2024Thursday, 6 June 2024, 11:15	3.7 LOW	—
The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP.
CVE-2024-5658 ↗	Jun 6, 2024Thursday, 6 June 2024, 11:15	4.8 MEDIUM	—
The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.