Oauth2 Server Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Oauth2 Server Project records in CISA KEV

No Oauth2 Server Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2025-22835 CVE-2025-31691 · GHSA-4f8q-mwgc-3mwc

MEDIUM 49

Missing Authorization vulnerability in Drupal OAuth2 Server allows Forceful Browsing.This issue affects OAuth2 Server: from 0.0.0 before 2.1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00434 Published 2025-03-31 Fixed in 2.1.0 CWE-862