CVE-2025-7393
CVE-2025-7393 · Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Mail Login allows Brute Force.This issue affects Mail Login: from 3.0.0 before 3.2.0, from 4.0.0 before 4.2.0.
CVSS 9.8 · Critical · EPSS 0.5% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
mail login
- Versions
- ≥ 3.0.0, < 3.2.0: Affected (semver)
- ≥ 4.0.0, < 4.2.0: Affected (semver)
Update to 3.2.0; Update to 4.2.0
drupal/mail_login Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 3.2.0
- ECOSYSTEM: ≥ 4.0.0, < 4.2.0
Update to 3.2.0; Update to 4.2.0