https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:31:40.929630+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-013 DRUPAL-CONTRIB-2025-013 2026-10-04T08:31:40.933198+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/oauth2_client

This module enables a developer to create dedicated OAuth2 clients for connecting to external APIs and other OAuth protected resources.

The module does not use Cross Site Request Forgery (CSRF) tokens to protect routes for enabling a client.

This vulnerability is mitigated by the fact that an attacker must know the machine name of the client and deceive another user with this permission.

 https://cve.radiocsirt.org/vuln/euvd-2026-235680 EUVD-2026-235680 2026-10-04T08:31:40.933252+00:00 EUVD-2026-235680 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31684 fkie_cve-2025-31684 2026-10-04T08:31:40.933268+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Drupal OAuth2 Client allows Cross Site Request Forgery.This issue affects OAuth2 Client: from 0.0.0 before 4.1.3.

 https://cve.radiocsirt.org/vuln/ghsa-6chf-hhqf-749c GHSA-6chf-hhqf-749c — Drupal OAuth2 Client Cross-Site Request Forgery (CSRF) 2026-10-04T08:31:40.933290+00:00

Affected: Packagist: drupal/oauth2_client

Cross-Site Request Forgery (CSRF) vulnerability in Drupal OAuth2 Client allows Cross Site Request Forgery. This issue affects OAuth2 Client: from 0.0.0 before 4.1.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0278 WID-SEC-W-2025-0278 — Drupal OAuth2 Client: Schwachstelle ermöglicht Manipulation 2026-10-04T08:31:40.933310+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle im OAuth2 Client für Drupal ausnutzen, um Daten zu manipulieren.