CVE-2025-31681 Authenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6...

CVE-2025-31681 Authenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6...

CVE-2025-31681

The Drupal Authenticator Login module (versions 0.0.0 through 2.0.5) is vulnerable to a Missing Authorization flaw (CWE-862). Due to improper authorization checks within the component, an attacker can perform Forceful Browsing to access restricted functionality or resources without proper permiss...