CVE-2026-114542
Full vulnerability record from the local CVENow database.
Description
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
Published
2026-10-30 04:18:13.140000
Last modified
2026-10-30 04:18:13.140000
View original CVE JSON
{
"id": "CVE-2026-114542",
"sourceIdentifier": "[email protected]",
"published": "2026-10-30T04:18:13.140",
"lastModified": "2026-10-30T04:18:13.140",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Drupal",
"product": "Simple OAuth (OAuth2) & OpenID Connect",
"collectionURL": "https://www.drupal.org/project/simple_oauth",
"repo": "https://git.drupalcode.org/project/simple_oauth",
"versions": [
{
"version": "6.1.0",
"lessThan": "6.1.3",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-525"
}
]
}
],
"references": [
{
"url": "https://www.drupal.org/sa-contrib-2026-242",
"source": "[email protected]"
}
]
}