backdrop-contrib/salesforce vulnerabilities
1 known vulnerability in backdrop-contrib/salesforce from Backdrop CMS contributed projects. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest first
- 7.1 High severity
backdrop-contrib/salesforce: Cross-Site Request Forgery
The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.