~ / search / GHSA-jwpx-6c4p-q4jq

GHSA-jwpx-6c4p-q4jq

Drupal Authenticator Login Missing Authorization vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2025-31681

Packages

EcosystemPackageAffectedFixed in
Packagist drupal/alogin < 2.0.6 2.0.6

Details

As written in the advisory (Markdown source, shown as plain text).

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing. This issue affects Authenticator Login: from 0.0.0 before 2.0.6.

References

External links from the advisory. They lead to third-party sites.