PUBLISHED
2026-01-28 20:16
MODIFIED
2026-01-28 20:16
EPSS (Prob. Exploit)
0.16%
Top 94.6%
> DESCRIPTION
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Login Time Restriction allows Cross Site Request Forgery.This issue affects Login Time Restriction: from 0.0.0 before 1.0.3.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-352: Cross-Site Request Forgery - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Login Time Restriction - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-120
AFFECTED PACKAGES:
Unknown / Unknown
4 versions affected
ALIASES:
DRUPAL-CONTRIB-2025-120
> HISTORIQUE DES MODIFICATIONS
Première apparition
28/01/2026 20:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:58
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-352: Cross-Site Request Forgery (CSRF) - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could hav...
Nouvelle valeur:
CWE-352: Cross-Site Request Forgery - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have origi...
📊
ENRICHISSEMENT
01/02/2026 06:45
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-352: Cross-Site Request Forgery (CSRF) - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could hav...
Total des modifications: 2
Dernière mise à jour: 1 week ago