PT-2025-41619 · Drupal · Drupal Protected Pages

Benji Fisher + 8 · Published 2025-10-10 · Updated 2025-10-11 · CVE-2025-9551

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Drupal Protected Pages versions 0.0.0 through 1.7.9

Description A flaw exists in Drupal Protected Pages that allows for excessive authentication attempts, potentially leading to brute force attacks. This issue impacts the Protected Pages module.

Recommendations Update to Protected Pages version 1.8.0 or later.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-9551

DRUPAL-CONTRIB-2025-101

Affected Products

Drupal Protected Pages

References · 9

• https://drupal.org/sa-contrib-2025-101 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-9551 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9551 · Security Note
• https://t.me/CVEtracker/34633 · Telegram Post
• https://twitter.com/CVEnew/status/1976780276815548810 · Twitter Post
• https://t.me/cveNotify/138299 · Telegram Post
• https://d7es.tag1.com/security-advisories/protected-pages-moderately-critical-access-bypass-sa-contrib-2025-101 · Note
• https://twitter.com/VulmonFeeds/status/1976891380220756211 · Twitter Post
• https://docs.herodevs.com/drupal/release-notes/protected-pages · Note