~ / search / GHSA-4f8q-mwgc-3mwc

GHSA-4f8q-mwgc-3mwc

Drupal OAuth2 Server Missing Authorization vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2025-31691

Packages

EcosystemPackageAffectedFixed in
Packagist drupal/oauth2_server < 2.1.0 2.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

Missing Authorization vulnerability in Drupal OAuth2 Server allows Forceful Browsing. This issue affects OAuth2 Server: from 0.0.0 before 2.1.0.

References

External links from the advisory. They lead to third-party sites.