This vulnerability in the Drupal Disable Login Page module (versions 0.0.0 through 1.1.4) involves improper restriction of excessive authentication attempts, which can be exploited to perform brute force attacks. The weakness is identified as CWE-307 and CWE-20, indicating issues with input validation and authentication controls. The CVSS 3.1 vector (AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N) reflects a network attack vector requiring high attack complexity, privileges, and user interaction, with high impact on confidentiality and integrity but no impact on availability. No official patch or fix has been documented in the provided data.

Successful exploitation could allow an attacker with appropriate privileges and user interaction to perform brute force attacks against the authentication mechanism, potentially compromising confidentiality and integrity of the system. However, the attack complexity is high and privileges are required, limiting the ease of exploitation. No availability impact is indicated. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Drupal security advisories for updates. Until a fix is available, consider implementing additional rate limiting or authentication throttling controls externally to mitigate brute force attempts.