Skip to content
OpenAdvisories
High · 8.1 CVE-2025-13982 DRUPAL-CONTRIB-2025-120EUVD-2025-206439GHSA-jcw2-rfj6-8rx8

Login Time Restriction - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-120

Published Jan 28, 2026 · Updated Jan 29, 2026 · Assigned by drupal

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Login Time Restriction allows Cross Site Request Forgery.This issue affects Login Time Restriction: from 0.0.0 before 1.0.3.

Affected products

VendorProductAffectedFixed
Drupal Login Time Restriction 0.0.0 – < 1.0.3 1.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/login_time_restriction < 1.0.3 1.0.3 DRUPAL-CONTRIB-2025-120

Advisories 1

References