CVE-2007-6320

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-12 · updated 2026-06-16
Weakness: CWE-352

Description

Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.

Affected products

Drupal Feature Module: 4.7.x_dev, 5.x_dev

References

http://drupal.org/node/198164
http://osvdb.org/43671
http://drupal.org/node/198164
http://osvdb.org/43671

Get alerted when CVE-2007-6320 or the next vulnerability affects your stack