PT-2026-5201 · Drupal · Drupal Login Time Restriction

Greg Knaddison + 4 · Publicado 2026-01-28 · Atualizado 2026-02-19 · CVE-2025-13982

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Drupal Login Time Restriction versions prior to 1.0.3

Description A Cross-Site Request Forgery (CSRF) issue exists in the Login Time Restriction module. This allows attackers to perform actions on behalf of authenticated users without their knowledge. The issue allows Cross Site Request Forgery.

Recommendations Update the Login Time Restriction module to version 1.0.3 or later.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2025-13982

DRUPAL-CONTRIB-2025-120

Produtos afetados

Drupal Login Time Restriction

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-13982 · Nota de Segurança
• https://drupal.org/sa-contrib-2025-120 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-13982 · Aviso do Fabricante
• https://t.me/cveNotify/152521 · Publicação no Telegram
• https://t.me/CVEtracker/43181 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2016616583725039803 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2016961399768182884 · Publicação no Twitter