CVE-2025-31684

The Drupal OAuth2 Client module (versions 0.0.0 through 4.1.2 ) is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. The root cause is that the module fails to use CSRF tokens to protect routes used for enabling a client. This allows an attacker to perform unauthorized actions on ...