CVE-2026-114542: Drupal Simple OAuth (OAuth2) & OpenID Connect, друго

Описание

Оригинално описание

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.

Засегнати продукти

• Drupal Simple OAuth (OAuth2) & OpenID Connect: 6.1.0 преди 6.1.3

Вид слабост

• CWE-525 Използване на браузърен кеш с чувствителни данни

История

Други уязвимости в Drupal Simple OAuth (OAuth2) & OpenID Connect

• 7.5CVE-2025-12466

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-114542
• https://nvd.nist.gov/vuln/detail/CVE-2026-114542
• https://www.drupal.org/sa-contrib-2026-242