Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Authenticator Login Project Component: Authenticator Login Clear all filters
TI-2025-07405 CVE-2025-8093 · GHSA-pjrr-5qr2-gxw3

Authenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-098

Priority MEDIUM 40

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00354 Published 2025-10-10 Fixed in 2.1.8 CWE-288
TI-2025-08242 CVE-2025-8995 · GHSA-x4hh-vfx4-455p

Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Priority MEDIUM 50

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00581 Published 2025-08-15 Fixed in 2.1.4 CWE-288
TI-2025-22825 CVE-2025-31681 · GHSA-jwpx-6c4p-q4jq

Authenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009

Priority MEDIUM 49

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00434 Published 2025-03-31 Fixed in 2.0.6 CWE-862