← Back

CVE-2026-3532

nvd nist
Published: Mar 26, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.2
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Exploitability: 1.6 / Impact: 2.5
Source: NVD

Description

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

Affected (1)

Bojanz
1 product
Openid Connect / Oauth Client
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Openid Connect / Oauth Client
Before 8.x-1.5

Related CWEs

CWE-178
Improper Handling of Case Sensitivity
The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

References (1)

Source: mlhess@drupal.org
Vendor Advisory

Timeline

No history available yet.