Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2025-45731 | 1 2fauth | 1 2fauth | 2025-07-28 | N/A | 6.5 MEDIUM |
A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending. | |||||
CVE-2023-36816 | 1 2fauth | 1 2fauth | 2024-11-21 | N/A | 6.1 MEDIUM |
2FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Cross site scripting (XSS) injection can be done via the account/service field. This was tested in docker-compose environment. This vulnerability has been patched in version 4.0.3. |