CVE-2007-6320

Drupal Feature Module 4.7.x-dev and 5.x-dev before 20071206 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/43671
Patch x_refsource_confirm
http://drupal.org/node/198164

Scores

EPSS 0.0012
EPSS Percentile 31.1%

Details

CWE
CWE-352
Status published
Products (2)
drupal/feature_module 4.7.x_dev
drupal/feature_module 5.x_dev
Published Dec 12, 2007
Tracked Since Feb 18, 2026