CVE-2025-3129
Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028
Résumé
Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/access_code
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4"}],"database_specific":{"constraint":"<2.0.4"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org