CVE-2025-8995
Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096
Résumé
Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/alogin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5"}],"database_specific":{"constraint":"<2.1.5"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org