—
DRUPAL-CONTRIB-2022-001
Details
This module enables you to login with an email address.
The module doesn't sufficiently check if a user account is active when using email login.
This vulnerability is mitigated by the fact that an attacker must have an account in the website that is blocked.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/super_login
Introduced in:
0Fixed in: 1.7.0Upgrade drupal/super_login to 1.7.0 or newer (ecosystem packagist:https://packages.drupal.org/8).