CVE-2025-13986
Disable Login Page - Critical - Access bypass - SA-CONTRIB-2025-124
Résumé
Disable Login Page - Critical - Access bypass - SA-CONTRIB-2025-124
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass.This issue affects Disable Login Page: from 0.0.0 before 1.1.3.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/disable_login
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3"}],"database_specific":{"constraint":"<1.1.3"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org