Lucene search
+L

29 matches found

CNNVD
CNNVD
•added 2025/08/15 12:00 a.m.•22 views

Drupal Authenticator Login Access Control Vulnerability

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login versions prior to 2.1.4 that stems from bypassing authentication using an alternate path or channel...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/15 12:00 a.m.•5 views

CVE-2025-8995: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS5.9AI score0.00523EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/13 12:00 a.m.•19 views

Drupal Authenticator Login module < 2.1.4 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Authenticator Login versions 2.1.4...

9.8CVSS5.9AI score0.00523EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/04/01 12:30 a.m.•27 views

Drupal Authenticator Login Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing. This issue affects Authenticator Login: from 0.0.0 before 2.0.6...

9.8CVSS5.8AI score0.00434EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/31 9:39 p.m.•15 views

CVE-2025-31681 Authenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6...

5.8AI score0.00434EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/31 9:39 p.m.•99 views

CVE-2025-31681

The Drupal Authenticator Login module (versions 0.0.0 through 2.0.5) is vulnerable to a Missing Authorization flaw (CWE-862). Due to improper authorization checks within the component, an attacker can perform Forceful Browsing to access restricted functionality or resources without proper permiss...

9.8CVSS5.8AI score0.00434EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•3 views

CVE-2025-31681: Missing Authorization

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6...

9.8CVSS5.8AI score0.00434EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•20 views

PT-2025-13845 · Drupal · Drupal Authenticator Login

Name of the Vulnerable Software and Affected Versions: Drupal Authenticator Login versions 0.0.0 through 2.0.5 Description: The issue is related to a Missing Authorization vulnerability in Drupal Authenticator Login, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 2.0....

9.8CVSS5.9AI score0.00434EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•19 views

Drupal Authenticator Login security vulnerability

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login versions prior to 2.0.6, which stems from a lack of authorization and could lead to forced browsing...

9.8CVSS5.7AI score0.00434EPSS
SaveExploits0References2
Rows per page
Query Builder