CVE-2026-1917
Login Disable - Less critical - Access bypass - SA-CONTRIB-2026-008
Résumé
Login Disable - Less critical - Access bypass - SA-CONTRIB-2026-008
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/login_disable
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3"}],"database_specific":{"constraint":"<2.1.3"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org