~ / search / GHSA-27mc-9399-r9mx

GHSA-27mc-9399-r9mx

Drupal Access code allows Brute Force Attempts

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-10928

Packages

EcosystemPackageAffectedFixed in
Packagist drupal/access_code < 2.0.5 2.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force. This issue affects Access code: from 0.0.0 before 2.0.5.

References

External links from the advisory. They lead to third-party sites.