Cross-Site Request Forgery Vulnerability in Drupal Search API Solr

CVE-2025-3907

What is CVE-2025-3907?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Drupal Search API Solr module, exposing users to unauthorized actions without their consent. This issue can be exploited by attackers to send malicious requests, potentially compromising user data and system integrity. It is crucial for users of affected versions, particularly those prior to 4.3.9, to be aware of this risk and apply the necessary security measures to safeguard their applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References