Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-13309 DRUPAL-CONTRIB-2024-073EUVD-2024-51521GHSA-p9jg-5w2m-vgg8

Login Disable - Critical - Access bypass - SA-CONTRIB-2024-073

Published Jan 9, 2025 · Updated Jan 30, 2025 · Assigned by drupal

Description

Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1.

Affected products

VendorProductAffectedFixed
Drupal Login Disable 2.0.0 – < 2.1.1 2.1.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/login_disable >= 2.0.0, < 2.1.1 2.1.1 DRUPAL-CONTRIB-2024-073

References