CVE-2026-45430: CWE-352 Cross-Site Request Forgery (CSRF) in Backdrop CMS contributed projects backdrop-contrib/salesforce
CVE-2026-45430 is a high-severity vulnerability in the Salesforce module for Backdrop CMS contributed projects (backdrop-contrib/salesforce) prior to version 1.x-1.0.1. The module fails to properly implement a random state parameter in the OAuth authorization flow, leaving it vulnerable to Cross-Site Request Forgery (CSRF) attacks. This weakness could allow an attacker to trick a user into performing unwanted actions with high confidentiality and integrity impact, though availability impact is low. The vulnerability affects the cloud-hosted service version of the module. A patch is available to address this issue, and since it is a cloud service, the vendor typically manages remediation server-side. There are no known exploits in the wild at this time.
AI Analysis
Technical Summary
The Salesforce module for Backdrop CMS (backdrop-contrib/salesforce) before version 1.x-1.0.1 does not use a random state parameter in its OAuth authorization flow, which is a recommended protection against CSRF attacks (CWE-352). This omission allows attackers to potentially execute unauthorized actions by exploiting the authorization process. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity with network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality and integrity with low impact on availability. The affected product is a cloud service, and the vendor manages patching on their side.
Potential Impact
Successful exploitation of this vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users by exploiting the OAuth authorization flow. This impacts the confidentiality and integrity of user data and operations within the Salesforce module integration. Availability impact is low. No known active exploits have been reported.
Mitigation Recommendations
A patch is available for this vulnerability in version 1.x-1.0.1 of the Salesforce module for Backdrop CMS. Since this is a cloud-hosted service, the vendor typically manages remediation server-side. Users should verify with the vendor advisory that the patch has been applied to their instance. No additional user action is required if the vendor confirms mitigation.
CVE-2026-45430: CWE-352 Cross-Site Request Forgery (CSRF) in Backdrop CMS contributed projects backdrop-contrib/salesforce
Description
CVE-2026-45430 is a high-severity vulnerability in the Salesforce module for Backdrop CMS contributed projects (backdrop-contrib/salesforce) prior to version 1.x-1.0.1. The module fails to properly implement a random state parameter in the OAuth authorization flow, leaving it vulnerable to Cross-Site Request Forgery (CSRF) attacks. This weakness could allow an attacker to trick a user into performing unwanted actions with high confidentiality and integrity impact, though availability impact is low. The vulnerability affects the cloud-hosted service version of the module. A patch is available to address this issue, and since it is a cloud service, the vendor typically manages remediation server-side. There are no known exploits in the wild at this time.
CVSS v3.1
Score 7.1high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Salesforce module for Backdrop CMS (backdrop-contrib/salesforce) before version 1.x-1.0.1 does not use a random state parameter in its OAuth authorization flow, which is a recommended protection against CSRF attacks (CWE-352). This omission allows attackers to potentially execute unauthorized actions by exploiting the authorization process. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity with network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality and integrity with low impact on availability. The affected product is a cloud service, and the vendor manages patching on their side.
Potential Impact
Successful exploitation of this vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users by exploiting the OAuth authorization flow. This impacts the confidentiality and integrity of user data and operations within the Salesforce module integration. Availability impact is low. No known active exploits have been reported.
Mitigation Recommendations
A patch is available for this vulnerability in version 1.x-1.0.1 of the Salesforce module for Backdrop CMS. Since this is a cloud-hosted service, the vendor typically manages remediation server-side. Users should verify with the vendor advisory that the patch has been applied to their instance. No additional user action is required if the vendor confirms mitigation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-05-12T04:06:23.682Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Is Cloud Service
- true
Threat ID: 6a02aae4cbff5d86109f4b4a
Added to database: 05/12/2026, 04:21:56 UTC
Last enriched: 05/19/2026, 11:05:54 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 77
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.