CVE-2014-9024

CVE-2014-9024 affects the Drupal contributed module Protected Pages (7.x-2.x) prior to version 7.x-2.4. The vulnerability arises because the module did not sufficiently protect variations on a protected path, allowing remote attackers to bypass password protection via a crafted path. The advisory...

CVE-2025-9551

The Drupal Protected Pages module (versions 0.0.0 before 1.8.0 and 7.X-1.0 before 7.X-2.5 ) contains an Improper Restriction of Excessive Authentication Attempts vulnerability. The module fails to limit the number of password attempts for protected pages, which allows for brute force attacks . Wh...