Drupal Login Disable
Moderate fix1 remedy
cpe:2.3:a:login_disable_project:login_disable:*:*:*:*:drupal:*:*
Moderate fix1 remedy
- < 2.1.3
Drupal Login Disable Authentication Bypass Vulnerability
Vulnerability
Patched
An authentication bypass vulnerability has been identified in the Drupal Login Disable module, affecting versions prior to 2.1.3. This vulnerability allows users to log in without the required access key by exploiting the HTTP request login route, bypassing the module's intended functionality.
Impact
Exploitation of this vulnerability allows unauthorized users to bypass authentication requirements, potentially leading to unauthorized access to the Drupal site.
Remediation
Users of the Login Disable module should upgrade to version 2.1.3.
Added: Mar 25, 2026, 4:46 PM
Updated: Mar 25, 2026, 4:46 PM
Vulnerability Rating
Custom Algorithm
spread
1.0impact
1.3exploitability
5.4remediation
7.7relevance
4.7threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.