CVE-2025-8093
CVE-2025-8093 · Authenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-098
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8.
CVSS 8.8 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
authenticator login
- Versions
- ≥ 0.0.0, < 2.1.8: Affected (semver)
Update to 2.1.8
drupal/alogin Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.1.8
Update to 2.1.8