CVE-2025-3907

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - mlhess@drupal.org

Published

2025-04-23

Last modified

2025-04-23

Weaknesses

CWE-352

Affected products

• Search Api Solr (Drunkenmonkey)
• Search Api Solr (Drupal)

References

• https://www.drupal.org/sa-contrib-2025-046