Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-31681 DRUPAL-CONTRIB-2025-009EUVD-2025-9036GHSA-jwpx-6c4p-q4jq

Authenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009

Published Mar 31, 2025 · Updated Apr 29, 2025 · Assigned by drupal

Description

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6.

Affected products

VendorProductAffectedFixed
Drupal Authenticator Login 0.0.0 – < 2.0.6 2.0.6

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/alogin < 2.0.6 2.0.6 DRUPAL-CONTRIB-2025-009

References