CVE-2026-3530

Server-Side Request Forgery SSRF vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0...

CVE-2026-3530

The Drupal OpenID Connect / OAuth client module (versions prior to 1.5.0 ) is vulnerable to Server-Side Request Forgery (SSRF) and information disclosure . The root cause is the insufficient validation of certain fields received from the identity provider. A remote attacker could trick the server...