{"id":"CVE-2026-13233","title":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery","summary":"Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.","severity":"none","cwe":["CWE-918"],"published":"2026-07-10","updated":"2026-07-10","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-13233","references":[{"url":"https://www.drupal.org/sa-contrib-2026-053","label":"mlhess@drupal.org"}],"tags":["nvd","exploit-available"],"epss":0.00208,"epssPercentile":0.11226,"ingestedAt":"2026-07-11T21:15:42.411Z","exploits":{"github":1,"githubRepos":["https://github.com/KuniNogu/drupal-openai-provider-ssrf-cve-2026-13233"],"checkedAt":"2026-09-21T15:27:57.969Z"},"exploitAvailable":true,"slug":"CVE-2026-13233","body":"## Overview\n\nServer-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":15,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":4946,"id":"CVE-2026-13233","ts":1788887218368,"field":"exploit_available","old":"false","new":"true"},{"seq":3829,"id":"CVE-2026-13233","ts":1788886351242,"field":"exploit_available","old":"true","new":"false"},{"seq":2666,"id":"CVE-2026-13233","ts":1788883015928,"field":"exploit_available","old":"false","new":"true"},{"seq":1695,"id":"CVE-2026-13233","ts":1788882420271,"field":"exploit_available","old":"true","new":"false"},{"seq":803,"id":"CVE-2026-13233","ts":1788881853899,"field":"exploit_available","old":"false","new":"true"}]}