PT-2025-45738 · Packagist · Drupal/Simple Oauth

Publicado 2025-10-30 · Atualizado 2025-10-30

OSV

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth (OAuth2) & OpenID Connect: from 6.0.0 before 6.0.7.

Correção

Authentication Bypass Using an Alternate Path or Channel

Enumeração de Fraquezas

CWE-288

Identificadores relacionados

GHSA-JQMQ-FPWV-P925

Produtos afetados

Drupal/Simple Oauth

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-12466 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-jqmq-fpwv-p925 · Aviso do Fabricante
• https://drupal.org/sa-contrib-2025-114 · Nota