Domain Login Restrict
Monthly
Authentication bypass in the Drupal contrib module Domain Login Restrict (versions 0.0.0 through before 1.5.0) allows a low-privilege authenticated user to use an alternate path or channel to evade the module's domain-based login restrictions, with low confidentiality and integrity impact under CVSS 5.4. Exploitation requires the module to be installed and actively enforcing restrictions; the exact bypass path is not described in the available sources. No public exploit was identified at time of analysis, and EPSS is 0.19% (9th percentile).
Authentication bypass in the Drupal contrib module Domain Login Restrict (versions 0.0.0 through before 1.5.0) allows a low-privilege authenticated user to use an alternate path or channel to evade the module's domain-based login restrictions, with low confidentiality and integrity impact under CVSS 5.4. Exploitation requires the module to be installed and actively enforcing restrictions; the exact bypass path is not described in the available sources. No public exploit was identified at time of analysis, and EPSS is 0.19% (9th percentile).