Openid

openid

Vendor: Drupal • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2008-0570

1Drupal

1Openid

Apr 23, 2026

Feb 5, 2008

N/A· v4

N/A· v3

5.0 MEDIUM· v2

The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID providers to spoof OpenID authentication for domains associated with oth...Show more