PT-2025-13848

CVE-2025-31684

Published

2025-02-05

Updated

2025-04-01

Description by

CVSS 3.1

6.8

Medium

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Drupal OAuth2 Client versions 0.0.0 through 4.1.2

Description A Cross-Site Request Forgery (CSRF) issue affects the Drupal OAuth2 Client, allowing unauthorized actions to be performed on behalf of the user. This issue may be exploited by an attacker to perform actions without the user's knowledge or consent.

Recommendations For Drupal OAuth2 Client versions 0.0.0 through 4.1.2, update to version 4.1.3 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products