Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Mail Login allows Brute Force.This issue affects Mail Login: from 3.0.0 before 3.2.0, from 4.0.0 before 4.2.0.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00525·Published 2025-07-21·Fixed in 3.2.0, 4.2.0CWE-307