CVE-2025-48010CWE-288

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061

Medium · published May 21, 2025

CVSS v3.1
4.8
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.8th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-05-21T16:23Z
EPSS history
Timeline
  • 21 MAY 16:23Z
    One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061
    cvelistv5