Drupal security advisory (AV24-559) – Canadian Centre for Cyber Security

Serial number: AV24-559
Date: October 3, 2024

On October 2, 2024, Drupal published a security advisory to address a critical vulnerability in the following product:

• Two-factor Authentication (TFA) module – versions prior to 1.8.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.