CVE Database
/

CVE-2025-31691

Back to search

CVE-2025-31691

Published: Mar 31, 2025

Modified: Apr 29, 2025

PUBLISHED

Description

Missing Authorization vulnerability in Drupal OAuth2 Server allows Forceful Browsing.This issue affects OAuth2 Server: from 0.0.0 before 2.1.0.

VendorProductVersions

Drupal

OAuth2 Server

affected
0.0.0 - < 2.1.0

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now