CVE-2006-5476: Drupal

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unauthorized actions as an arbitrary user via unspecified vectors.

Affected products

• Drupal Drupal: version 4.6.0 only; version 4.6.1 only; version 4.6.2 only; version 4.6.3 only; version 4.6.4 only; version 4.6.5 only; …

Published 2006-10-24. Last modified 2026-06-16.