CVE-2025-3129

4.8 mediumEPSS 0.3%

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2025-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

access_code_project:access_code

References

https://www.drupal.org/sa-contrib-2025-028

Check your stack JSON