CVE-2007-3690

HIGH 7.8CVE-2007-3690 · Published 11/07/2007 · updated 16/06/2026

In short

CVE-2007-3690 is a HIGH (CVSS 7.8) vulnerability affecting forward module (drupal).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
forward module drupal	`≤ 4.7≤ 5.x-1.1`	No fix yet

Description

The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments.

References

drupal.org/node/152806 · Patch
drupal.org/node/158022 · Patch
drupal.org/node/158025 · Patch
osvdb.org/37896
secunia.com/advisories/25999
securityfocus.com/bid/24862
vupen.com/english/advisories/2007/2469
exchange.xforce.ibmcloud.com/vulnerabilities/35318

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free