CVE-2026-0948
Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005
Résumé
Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO Login: from 0.0.0 before 1.0.4.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/social_auth_entra_id
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4"}],"database_specific":{"constraint":"<1.0.4"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org