← Database

CVE-2007-6320

MEDIUM CVSS: 4.3 Published: 2007-12-12 Modified: 2026-06-16

Description

Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.

Affected Platforms

Drupal Feature Module

Weakness Type

CWE-352

References