VULNERABILITY INTELLIGENCE
CVE-2007-6320
CVSS score4.3 MEDIUM
EPSS probability0.67%
CISA KEVNot currently listed
Published2007-12-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)