4.3
CVSSv2

CVE-2007-5594

Published: 19/10/2007 Updated: 19/04/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Drupal 5.x prior to 5.3 does not apply its Drupal Forms API protection against the user deletion form, which allows remote malicious users to delete users via a cross-site request forgery (CSRF) attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

drupal drupal

fedoraproject fedora 7