2 matches found
CVE-2014-9024
CVE-2014-9024 affects the Drupal contributed module Protected Pages (7.x-2.x) prior to version 7.x-2.4. The vulnerability arises because the module did not sufficiently protect variations on a protected path, allowing remote attackers to bypass password protection via a crafted path. The advisory...
CVE-2025-9551
The CVE-2025-9551 entry concerns the Drupal Protected Pages module (vulnerable up to 1.7.x; affected range 0.0.0 through before 1.8.0). Root cause: lack of restriction on the number of authentication attempts, enabling brute-force attacks on protected pages. Impact is described as potential brute...