CVE-2007-3690

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-11 · updated 2026-06-16

Description

The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments.

Affected products

Drupal Forward Module: through 4.7; through 5.x-1.1

References

http://drupal.org/node/152806
http://drupal.org/node/158022
http://drupal.org/node/158025
http://osvdb.org/37896
http://secunia.com/advisories/25999
http://www.securityfocus.com/bid/24862
http://www.vupen.com/english/advisories/2007/2469
https://exchange.xforce.ibmcloud.com/vulnerabilities/35318
http://drupal.org/node/152806
http://drupal.org/node/158022
http://drupal.org/node/158025
http://osvdb.org/37896

Get alerted when CVE-2007-3690 or the next vulnerability affects your stack