CVE-2025-3907 - Search API Solr - Moderately critical - Cross Site Request Forgery

Back Back to CVE browser

MEDIUM

Search API Solr - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-046

Published Apr 23, 2025

4.3

MEDIUM

CVSS 3.1

EPSS 0.15%

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9.

Affected products

Vendor Drupal Product Search API Solr Default
unaffected
Affected
- ≥ 0.0.0, < 4.3.9

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Drupal	Search API Solr	unaffected	Affected ≥ 0.0.0, < 4.3.9

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12173
Advisory
https://www.drupal.org/sa-contrib-2025-046
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12173		Advisory
https://www.drupal.org/sa-contrib-2025-046		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner drupal

Published Apr 23, 2025

Updated Apr 23, 2025

Reserved Apr 23, 2025

Link CVE-2025-3907

CISA Vulnrichment

Updated Apr 23, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-3907

Red Hat

No data

ENISA EUVD

Assigner drupal

Published Apr 23, 2025

Updated Apr 23, 2025

Link EUVD-2025-12173

GitHub

No data