CVE-2025-7393
Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088
Résumé
Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Mail Login allows Brute Force.This issue affects Mail Login: from 3.0.0 before 3.2.0, from 4.0.0 before 4.2.0.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/mail_login
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0"}],"database_specific":{"constraint":"<3.2.0"}},{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.2.0"}],"database_specific":{"constraint":">=4.0.0 <4.2.0"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org