CVE-2025-3129

Summary

CVE-2025-3129 is a vulnerability affecting Drupal Access code versions prior to 2.0.4. The issue involves a failure to properly restrict excessive authentication attempts, making it susceptible to Brute Force attacks. An attacker can exploit this vulnerability by making repeated login attempts to gain unauthorized access to the system. This weakness could potentially lead to serious security consequences, including data breaches or unauthorized system control. System administrators are advised to update their Drupal Access code to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.