Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-31684

OAuth2 Client - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-013

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
drupal

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal OAuth2 Client allows Cross Site Request Forgery.This issue affects OAuth2 Client: from 0.0.0 before 4.1.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal OAuth2 Client

Default version status: unaffected

  • 0.0.0 to < 4.1.3affected

References