CVE-2026-4393

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Automated Logout allows Cross Site Request Forgery.This issue affects Automated Logout: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.2.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - mlhess@drupal.org

Published

2026-03-26

Last modified

2026-03-30

Weaknesses

CWE-352

Affected products

• Automated Logout (Ajk)
• Automated Logout (Drupal)

References

• https://www.drupal.org/sa-contrib-2026-030