CVE-2025-10928
CVE-2025-10928 · Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-108
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.5.
CVSS 6.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
access code
- Versions
- ≥ 0.0.0, < 2.0.5: Affected (semver)
Update to 2.0.5
drupal/access_code Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.0.5
Update to 2.0.5
drupal/access_code Packagist
- Affected ranges
- ECOSYSTEM: < 2.0.5
Update to 2.0.5