Description (CNA)
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Drupal / Protected Pages | affected 0.0.0 before 1.8.0; affected 7.x-1.0 before 7.x-2.5 |
CWE
CWE-307
References
- https://www.drupal.org/sa-contrib-2025-101
- https://docs.herodevs.com/drupal/release-notes/protected-pages
- https://d7es.tag1.com/security-advisories/protected-pages-moderately-critical-access-bypass-sa-contrib-2025-101
ADP enrichment
No English description supplied.
No references supplied.