Unscored DRUPAL-CONTRIB-2023-025

This module provides integration with Mailchimp, a popular email delivery service. A route related to OAuth authentication is not protected…

Published Jun 28, 2023 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module provides integration with Mailchimp, a popular email delivery service.

A route related to OAuth authentication is not protected against a Cross Site Request Forgery attack.

Ecosystem	Package	Affected	Fixed	Record
Packagist	drupal/mailchimp	>= 2.2.0, < 2.2.2	2.2.2	DRUPAL-CONTRIB-2023-025