Executive brief
Drupal Authenticator Login Missing Authorization vulnerability
Affected products
- Packagist drupal/alogin
- packagist:https://packages.drupal.org/8 drupal/alogin
Junglewise Threat Intelligence
CVE-2025-31681: Drupal Authenticator Login Missing Authorization vulnerability
CVE-2025-31681 · Severity: low · CVSS 3.1 · Published 2025-04-01
Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Alogin. Vendors: Packagist, Packagist:Https://Packages.Drupal.Org/8.
Related threats
- DRUPAL-CONTRIB-2025-098 - This module allows users to setup two-factor authentication (2FA) using authenticator apps for enhanced login security. The module did not
- DRUPAL-CONTRIB-2025-096 - This module enables users to setup two-factor authentication (2FA) using authenticator apps for enhanced login security. The module alters t