Cross‑Site Request Forgery (CSRF) occurs in the Ray Enterprise Translation module for Drupal, classified as CWE‑352. The vulnerability allows an attacker to trick an authenticated user into sending unintended requests, thereby executing actions the user is authorized to perform. The module’s routes are vulnerable to CSRF attacks, enabling an attacker to trigger privileged operations that could alter user content or settings.

Any Drupal site that has the Ray Enterprise Translation module installed in a vulnerable version is exposed. The affected releases are 0.0.0 through 4.0.4, 4.1.0 through 4.1.4, and 11.0.0 through 11.0.4. Users with permissions to use the module’s functionality are at risk.

The CVSS score of 4.3 indicates moderate severity, and the EPSS score of less than 1 % shows a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is inferred to be an adversary tricking a legitimate, authenticated user into visiting a malicious link or submitting a crafted action on the site. Exploitation requires the presence of an authenticated user; it does not provide remote code execution or direct network compromise.