Vulnerabilidades do Backdrop CMS contributed projects Backdrop-contrib/salesforce
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Backdrop CMS contributed projects Backdrop-contrib/salesforce: 1 registro(s), com versões afetadas e correções.
CVE-2026-45430
Alta · 7.1
CWE-352 12/05/2026
Cross-Site Request Forgery (CSRF) em Backdrop CMS contributed projects Backdrop-contrib/salesforce
The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.