Drupal OpenID Connect/OAuth Client Authentication Bypass Vulnerability
Vulnerability
An authentication bypass vulnerability has been identified in the Drupal OpenID Connect/OAuth client, specifically in versions prior to 1.5.0. This vulnerability allows attackers to bypass authentication mechanisms, potentially leading to unauthorized access.
Impact
Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized users to gain access to resources or functionalities that require authentication.
Added: Mar 26, 2026, 9:53 PM
Updated: Mar 26, 2026, 9:53 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
0.0relevance
4.7threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.