Drupal security advisory (AV25-389)

[MalBot]

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV25-389<br /><strong>Date: </strong>July 3, 2025</p>

On July 2, 2025, Drupal published security advisories to address vulnerabilities in the following products :

• Config Pages Viewer – versions prior to 1.0.4
• Two-factor Authentication (TFA) – versions prior to 1.11.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086
• Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085
• Drupal Security Advisories

</div>

Article Link: Drupal security advisory (AV25-389) - Canadian Centre for Cyber Security