CVE Intelligence

Backdrop CMS contributed projects Backdrop-contrib/salesforce vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Backdrop CMS contributed projects Backdrop-contrib/salesforce: 1 record(s), with affected versions and fixes.

CVE-2026-45430 High · 7.1 CWE-352 May 12, 2026
Cross-Site Request Forgery (CSRF) in Backdrop CMS contributed projects Backdrop-contrib/salesforce
The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.