{"id":"CVE-2026-13233","aliases":["DRUPAL-CONTRIB-2026-053","EUVD-2026-43057","GHSA-65px-3fq7-92h3"],"status":"published","title":"OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053","description":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00208,"percentile":0.10983,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-918"],"published":"2026-06-24T18:36:06Z","modified":"2026-10-28T02:30:43Z","exploits":[{"source":"pocgithub","id":"KuniNogu/drupal-openai-provider-ssrf-cve-2026-13233","title":"KuniNogu/drupal-openai-provider-ssrf-cve-2026-13233","date":"2026-07-21","url":"https://github.com/KuniNogu/drupal-openai-provider-ssrf-cve-2026-13233"}],"fixes":[{"ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ai_provider_openai","fixed_in":["1.1.1","1.2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ai_provider_openai","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1"}]},{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.2"}]}]}],"products":[{"vendor":"drupal","product":"openai provider"},{"vendor":"openai_provider_project","product":"openai_provider"}],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-053","tags":["Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13233","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-65px-3fq7-92h3"},{"url":"https://git.drupalcode.org/project/ai_provider_openai","tags":["web"]},{"url":"https://www.drupal.org/project/ai_provider_openai","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13233.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-13233","title":"OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053","description":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.","status":"published","published":"2026-07-10T21:44:39.537Z","modified":"2026-07-13T18:08:13.043Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:19:49.885652Z"}],"euvd":[{"id":"EUVD-2026-43057","description":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.","status":"published","published":"2026-07-10T21:44:39Z","modified":"2026-07-13T18:08:13Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T18:20:01.134466Z"}],"ghsa":[{"id":"GHSA-65px-3fq7-92h3","title":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side...","description":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.","status":"published","published":"2026-07-11T00:31:46Z","modified":"2026-07-13T18:30:34Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T15:09:25.900925Z"}],"nvd":[{"id":"CVE-2026-13233","description":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.","status":"published","published":"2026-07-10T22:16:39.397Z","modified":"2026-10-25T15:10:00.147Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:12:28.771746Z"}],"osv":[{"id":"CVE-2026-13233","title":"OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053","description":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.","status":"published","published":"2026-07-10T21:44:39.537Z","modified":"2026-10-28T02:30:43.002979705Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T15:44:57.354194Z"},{"id":"DRUPAL-CONTRIB-2026-053","description":"This module enables you to use OpenAI as a provider for the AI module.\n\nThe module doesn't sufficiently sanitize user-supplied URLs, leading to a Server-side request forgery (SSRF) vulnerability.\n\nThis vulnerability is mitigated by the fact that an attacker must have the access to change the host url and a way to generate AI-generated images.","status":"published","published":"2026-06-24T18:36:06Z","modified":"2026-09-10T03:45:07.578188809Z","updated_at":"2026-11-02T15:46:13.900249Z"}]}}