Threats tagged 'drupal-contrib-2025-088'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2025-7393Mail login · This module enables users to login by email address with the minimal configurations Critical9.82025-07-09GCVE DatabaseCVE-2025-7393 The Drupal mail_login module allows users to log in using their email address with minimal configuration. It contains incomplete brute force protection on the login form, which an attacker could bypass to potentially gain unauthorized account access. Fixed versions 3.2.0 and 4.2.0 address this issue. Report on CVE-2025-7393 Vulnerability #drupal-contrib-2025-088 #packagist-https-packages-drupa	GCVE Database	2025-07-09

Page 1 of 1