CVE-2025-48011CWE-288

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-062

Medium · published May 21, 2025

CVSS v3.1
4.8
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.9th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-05-21T16:23Z
EPSS history
Timeline
  • 21 MAY 16:23Z
    One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-062
    cvelistv5