CVE-2015-4397: Node Template Project Node Template

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the "access node template" permission for requests that delete node templates via unspecified vectors.

Affected products

• Node Template Project Node Template: any version

Published 2015-06-15. Last modified 2026-06-17.