CNNVD-202508-1889 Information

CNNVD ID

CNNVD-202508-1889

CVE-2025-8995

  • CNNVD Published: 2025-08-15

Description (Chinese)

Drupal Authenticator Login是Drupal社区的一种用于 Drupal 的认证登录模块或功能。 Drupal Authenticator Login 2.1.4之前版本存在安全漏洞,该漏洞源于使用替代路径或通道绕过身份验证。

Description (English)

Drupal Autocentor Login is a certified login module or function for Drupal communities. There was a security loophole in the previous version of Drupal Autocentor Login 2.1.4, which stemmed from the use of alternative routes or channels to bypass identification.

Hazard Level

Low

Vulnerability Type

访问控制错误

Affected Vendor

Drupal

Published

2025-08-15

Last Modified

2026-02-24

References

https://www.drupal.org/sa-contrib-2025-096 https://vigilance.fr/vulnerability/Drupal-Authenticator-Login-user-access-dated-13-08-2025-47975 https://nvd.nist.gov/vuln/detail/CVE-2025-8995

Patch

https://www.drupal.org/project/alogin/releases

Share on: