CVE-2007-6320: Drupal Feature Module

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.

Affected products

• Drupal Feature Module: version 4.7.x_dev only; version 5.x_dev only

Published 2007-12-12. Last modified 2026-06-16.