CVE-2025-31684: Mskcc OAUTH2 Client

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Drupal OAuth2 Client allows Cross Site Request Forgery.This issue affects OAuth2 Client: from 0.0.0 before 4.1.3.

Affected products

• Mskcc OAUTH2 Client: before 4.1.3 (fixed in 4.1.3)

Published 2025-03-31. Last modified 2026-06-17.