CNNVD-202510-1389 Information

CNNVD ID

CNNVD-202510-1389

CVE-2025-9551

  • CNNVD Published: 2025-10-10

Description (Chinese)

Drupal Protected Pages是Drupal社区的一个页面锁定插件。 Drupal Protected Pages 1.8.0之前版本存在安全漏洞,该漏洞源于未限制过多身份验证尝试,可能导致暴力破解攻击。

Description (English)

Drupal Proteced Pages is a page locked plugin for the Drupal community. There was a security loophole in the pre-Drupal prepared Pages 1.8.0, which stemmed from unlimited attempts at identification, which could lead to violent deciphering of attacks.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Drupal

Published

2025-10-10

Last Modified

2026-02-24

References

https://www.drupal.org/sa-contrib-2025-101 https://vigilance.fr/vulnerability/Drupal-Protected-Pages-user-access-via-Brute-Force-48077

Patch

https://www.drupal.org/sa-contrib-2025-101

Share on: