CVE-2025-13986
Disable Login Page - Critical - Access bypass - SA-CONTRIB-2025-124
Summary
Disable Login Page - Critical - Access bypass - SA-CONTRIB-2025-124
Original description
The description as published by the source.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass.This issue affects Disable Login Page: from 0.0.0 before 1.1.3.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/disable_login
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3"}],"database_specific":{"constraint":"<1.1.3"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org