Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-45430 CSRF Attack Vulnerability in Salesforce Module for Backdrop CMS Before 1.0.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45430
Post summary
The post announces a CSRF vulnerability in the Salesforce module for Backdrop CMS (pre‑1.0.1) but offers no additional details, exploits, or mitigation information.
🚨 CVE-2026-45430: Backdrop CMS Salesforce module <1.x-1.0.1 vulnerable to OAuth CSRF. Missing state parameter in authorization flow. Entity's correlation: session binding bypass vector. Patch to 1.x-1.0.1+. https://0x2ed3bb60.xyz/threat/7cca8a6a055f1499
Post summary
The post announces CVE-2026-45430 affecting the Backdrop CMS Salesforce module, details an OAuth CSRF flaw, and advises upgrading to version 1.0.1+.