Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:simple_oauth_(oauth2)_&_openid_connect:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductSimple Oauth (Oauth2) & Openid Connect (c916f130-f74f-5f23-bbfb-eb4abf3f0977)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12466 vulnerable 2026-06-08 07:04:30.274375 Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth (OAuth2) & OpenID Connect: from 6.0.0 before 6.0.7.
Published: 2025-10-29T23:14:51.343Z
Updated: 2025-10-30T14:38:59.887Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.