~ / search / GHSA-6chf-hhqf-749c

GHSA-6chf-hhqf-749c

Drupal OAuth2 Client Cross-Site Request Forgery (CSRF)

Source: GitHub Advisory Database (reviewed) Low CVE-2025-31684

Packages

EcosystemPackageAffectedFixed in
Packagist drupal/oauth2_client < 4.1.3 4.1.3

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-Site Request Forgery (CSRF) vulnerability in Drupal OAuth2 Client allows Cross Site Request Forgery. This issue affects OAuth2 Client: from 0.0.0 before 4.1.3.

References

External links from the advisory. They lead to third-party sites.