Cross-Site Request Forgery Vulnerability in Drupal Search API Solr

CVE-2025-3907

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Drupal Search API Solr module, exposing users to unauthorized actions without their consent. This issue can be exploited by attackers to send malicious requests, potentially compromising user data and system integrity. It is crucial for users of affected versions, particularly those prior to 4.3.9, to be aware of this risk and apply the necessary security measures to safeguard their applications.

References