CVE-2026-13243

The Drupal Salesforce Suite (versions 0.0.0 to 5.1.3) is vulnerable to a Cross-Site Request Forgery (CSRF) issue due to improper validation of the OAuth handshake during interactive authentication. An attacker can exploit this to hijack the authorization token and bind the site to an attacker-con...