CVE-2026-87953: SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151

Q: Which installations are affected?

Drupal sites using the SAML SSO - Service Provider module are affected if the module version is from 0.0.0 through 3.2.0.

Q: What is the impact of this issue?

The vulnerability allows server-side request forgery, meaning the affected Drupal server can be induced to make requests.

Published Oct 22, 2026

Updated

Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

Affected Software

1 affected component

Drupal SAML SSO - Service Provider>=0.0.0<=3.2.0

Event History

Oct 22, 2026

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

DescriptionWeakness

Frequently Asked Questions

Which installations are affected?

Drupal sites using the SAML SSO - Service Provider module are affected if the module version is from 0.0.0 through 3.2.0.

What is the impact of this issue?

The vulnerability allows server-side request forgery, meaning the affected Drupal server can be induced to make requests.

CVE-2026-87953: SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151

Affected Software

Event History

Frequently Asked Questions

Which installations are affected?

What is the impact of this issue?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What is the impact of this issue?