DRUPAL-CONTRIB-2020-034
No score
This module enables you login into any OAuth 2.0 compliant application using Drupal credentials.
The 8.x branch of the module is vulnerable to SQL injection.
What each source reports
OSV No score
This module enables you login into any OAuth 2.0 compliant application using Drupal credentials.
The 8.x branch of the module is vulnerable to SQL injection.
- Record
DRUPAL-CONTRIB-2020-034- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/oauth_server_ssoPackagist:https://packages.drupal.org/8 |
1.0.0 to 1.0.0 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2020-034 is a vulnerability with no CVSS score yet in drupal/oauth_server_sso, published October 14, 2020. No source lists public exploit code. No source names a fixed version.