DRUPAL-CONTRIB-2023-045
DRUPAL-CONTRIB-2023-045
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This module enables users to log in by email address with minimal configurations. Drupal core contains protection against brute force attacks via a flood control mechanism. This module's functionality did not replicate the flood control, enabling brute force attacks.
Fix available
- Published
- Updated
Stack: php
Affected products and versions
drupal/mail_login Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.8.0
Update to 2.8.0