Most recent entries from all

DRUPAL-CONTRIB-2025-101

Affected: Packagist:https://packages.drupal.org/8: drupal/protected_pages

This module enables you to protect individual pages with a password.

The module doesn't limit the number of password attempts, making it vulnerable to brute force attacks.

This vulnerability is mitigated by the fact that an attacker must know the protected page's URL.

**CVSS risk score ([experimental](https://www.drupal.org/project/securitydrupalorg/issues/3442181)) 6.3 / Medium**

[CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N](https://www.first.org/cvss/calculator/4-0#CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)

EUVD-2026-277699

fkie_cve-2025-9551

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5.

GHSA-c25q-57mr-rv37

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0.

WID-SEC-W-2025-1918 — Drupal Extensions: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Extensions ausnutzen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.