VULNERABILITY INTELLIGENCE
CVE-2007-3690
CVSS score7.8 HIGH
EPSS probability1.78%
CISA KEVNot currently listed
Published2007-07-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Description
The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments.