unscored
CVE-2026-118573
Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing.
Impact
Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 Token Manager versions: from 0.0.0 to 1.2.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | OAuth2 Token Manager | from 0.0.0 before 1.2.0 |