| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/login_time_restriction | < 1.0.3 | 1.0.3 |
| login time restriction | < 1.0.3 | 1.0.3 |
This module enables you to apply time-based login restrictions and display related warning or logout confirmation pages.
The module doesn't sufficiently protect its confirmation routes from cross-site request forgery (CSRF), allowing the logout confirmation route to be triggered without user interaction.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free