Vigilance.fr - Drupal OAuth2 Server: user access dated 27/02/2025
An attacker can bypass restrictions of Drupal OAuth2 Server, even if disabled, in order to gain user privileges. - Security Vulnerability

An attacker can bypass restrictions of Drupal OAuth2 Server, even if disabled, in order to gain user privileges.