4.2
CVE-2025-13986
- EPSS 0.02%
- Veröffentlicht 28.01.2026 20:02:53
- Zuletzt bearbeitet 06.02.2026 19:00:13
- Quelle mlhess@drupal.org
- CVE-Watchlists
- Unerledigt
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass.This issue affects Disable Login Page: from 0.0.0 before 1.1.3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zyxware ≫ Disable Login Page SwPlatformdrupal Version < 1.1.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.029 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 4.2 | 1.6 | 2.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
|
CWE-288 Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.