DRUPAL-CONTRIB-2025-068unknown
DRUPAL-CONTRIB-2025-068
The advisory, in context
The Admin Audit Trail module tracks logs of specific events that you'd like to review. When the submodule Admin Audit Trail: User Authentication is enabled, it logs user authentication events (login, logout, and password reset requests).
The module does not sufficiently limit some large values before logging the data.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
drupal/admin_audit_trail Packagist:https://packages.drupal.org/8
Ecosystem versions
Earlier releases before 1.0.5
Fixed in 1.0.5
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.5"
}
],
"type": "ECOSYSTEM",
"database_specific": {
"constraint": "<1.0.5"
}
}
],
"versions": []
}