AIKIDO-2025-10477

drupal/search_api_solr is vulnerable to Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF)CVE-2025-3907 Published Jul 18, 2025

Medium Risk

1.0.0 - 4.3.8

Fixed in 4.3.9

Are you affected? Scan for Free

TL;DR

The module doesn't sufficiently protect certain routes from CSRF attacks.

You are affected if you are using a version that falls within the vulnerable range.

drupal/search_api_solr is vulnerable to Cross-Site Request Forgery (CSRF) in versions 1.0.0 - 4.3.8.

Upgrade the drupal/search_api_solr library to the patch version.

Medium Risk

1.0.0 - 4.3.8

Fixed in 4.3.9

Are you affected? Scan for Free

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Company

Resources

Industries

Use Cases

Compare

Legal

Connect

Security

Stay up to date with all updates

Keizer Karelstraat 15, 9000, Ghent, Belgium

95 Third St, 2nd Fl, San Francisco, CA 94103, US

Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK

Ghent, Belgium | San Francisco, US