CVE-2015-4397

no score yetEPSS 0.6%

Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the "access node template" permission for requests that delete node templates via unspecified vectors.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2015-06-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

node_template_project:node_template

References

http://www.openwall.com/lists/oss-security/2015/04/25/6
https://www.drupal.org/node/2475955
http://www.openwall.com/lists/oss-security/2015/04/25/6
https://www.drupal.org/node/2475955

Check your stack JSON