https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 17:05:55 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-249 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/domain_login_restrict</p> <p>This module enables you to restrict user logins on a multi-domain site built with the Domain module, so that users can only log in on the domains assigned to them.</p> <p>The module doesn&#39;t sufficiently enforce these restrictions when a user logs in by a method other than the standard login form.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a valid user account on the site, and the &#34;Enable restriction&#34; setting must be enabled on the Domain settings page. Users with the &#34;Login to any domain&#34; permission are not affected by the restriction.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/domain_login_restrict</p> <p>This module enables you to restrict user logins on a multi-domain site built with the Domain module, so that users can only log in on the domains assigned to them.</p> <p>The module doesn&#39;t sufficiently enforce these restrictions when a user logs in by a method other than the standard login form.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a valid user account on the site, and the &#34;Enable restriction&#34; setting must be enabled on the Domain settings page. Users with the &#34;Login to any domain&#34; permission are not affected by the restriction.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-249 https://db.gcve.eu/vuln/fkie_cve-2026-114572 <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0.</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114572 https://db.gcve.eu/vuln/ghsa-7fp8-3j4p-x5h2 <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0.</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0.</p> https://db.gcve.eu/vuln/ghsa-7fp8-3j4p-x5h2