ByteOS Network

CVE Vulnerability Details :

CVE-2025-3129

PUBLISHED

More Info Official Page

Assigner-drupal

Assigner Org ID-2c85b837-eb8b-40ed-9d74-228c62987387

Published At-02 Apr, 2025 | 21:10

Updated At-15 Apr, 2025 | 14:11

▼CVE Numbering Authority (CNA)

Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4.

Affected Products

Vendor

The Drupal Association

Product

Access code

Collection URL

https://www.drupal.org/project/access_code

Repo

https://git.drupalcode.org/project/access_code

Default Status

unaffected

Versions

Affected

From 0.0.0 before 2.0.4 (semver)

Problem Types

Type	CWE ID	Description
CWE	CWE-307	CWE-307 Improper Restriction of Excessive Authentication Attempts

Impacts

CAPEC ID	Description
CAPEC-112	CAPEC-112 Brute Force

Credits

finder

Marcin Maruszewski (marcin maruszewski)

remediation developer

Gergely Lekli (glekli)

coordinator

Greg Knaddison (greggles)

coordinator

Drew Webber (mcdruid)

coordinator

Juraj Nemec (poker10)

References

Hyperlink	Resource
https://www.drupal.org/sa-contrib-2025-028	N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics

Version	Base score	Base severity	Vector
3.1	4.8	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References