CNNVD-202508-1889 Information
Aug 15, 2025
cve
CNNVD ID
CNNVD-202508-1889
Related CVE
- CNNVD Published: 2025-08-15
Description (Chinese)
Drupal Authenticator Login是Drupal社区的一种用于 Drupal 的认证登录模块或功能。 Drupal Authenticator Login 2.1.4之前版本存在安全漏洞,该漏洞源于使用替代路径或通道绕过身份验证。
Description (English)
Drupal Autocentor Login is a certified login module or function for Drupal communities. There was a security loophole in the previous version of Drupal Autocentor Login 2.1.4, which stemmed from the use of alternative routes or channels to bypass identification.
Hazard Level
Low
Vulnerability Type
访问控制错误
Affected Vendor
Drupal
Published
2025-08-15
Last Modified
2026-02-24
References
https://www.drupal.org/sa-contrib-2025-096 https://vigilance.fr/vulnerability/Drupal-Authenticator-Login-user-access-dated-13-08-2025-47975 https://nvd.nist.gov/vuln/detail/CVE-2025-8995
Patch
https://www.drupal.org/project/alogin/releases
Share on: