CVE-2025-10930

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0.

PUBLISHED Reserved 2025-09-24 | Published 2025-10-29 | Updated 2025-10-30 | Assigner drupal

Problem types

CWE-352 Cross-Site Request Forgery (CSRF)

Product status

Credits

Juraj Nemec (poker10) finder

Sascha Grossenbacher (berdir) remediation developer

Pieter Frenssen (pfrenssen) remediation developer

Juraj Nemec (poker10) coordinator

References

www.drupal.org/sa-contrib-2025-110

cve.org (CVE-2025-10930)

nvd.nist.gov (CVE-2025-10930)

Download JSON