4.2
CVE-2026-3532
- EPSS 0.13%
- Veröffentlicht 26.03.2026 20:04:03
- Zuletzt bearbeitet 01.04.2026 16:14:44
- Quelle mlhess@drupal.org
- CVE-Watchlists
- Unerledigt
LoginOpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027
Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bojanz ≫ Openid Connect / Oauth Client SwPlatformdrupal Version < 8.x-1.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.031 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.2 | 1.6 | 2.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 4.2 | 1.6 | 2.5 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
|
CWE-178 Improper Handling of Case Sensitivity
The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.
https://www.drupal.org/sa-contrib-2026-027