Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-7393

Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
drupal

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Mail Login allows Brute Force.This issue affects Mail Login: from 3.0.0 before 3.2.0, from 4.0.0 before 4.2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal Mail Login

Default version status: unaffected

  • 3.0.0 to < 3.2.0affected
  • 4.0.0 to < 4.2.0affected

References