CVE-2007-3690: Drupal Forward Module

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments.

Affected products

• Drupal Forward Module: up to and including 4.7; up to and including 5.x-1.1

Published 2007-07-11. Last modified 2026-06-16.