CVEvulnerability
CVE-2012-1589
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-05-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-20
Description
Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.
Affected configurations
• drupal drupal 7.0
• drupal drupal 7.1
• drupal drupal 7.2
• drupal drupal 7.3
• drupal drupal 7.4
• drupal drupal 7.5
• drupal drupal 7.6
• drupal drupal 7.7
• drupal drupal 7.8
• drupal drupal 7.9
• drupal drupal 7.10
• drupal drupal 7.11
• drupal drupal 7.12
• drupal drupal 7.x-dev
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://drupal.org/node/1557938 Vendor Advisory
- http://jvn.jp/en/jp/JVN45898075/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045 jvndb.jvn.jp
- http://osvdb.org/81679 osvdb.org
- http://secunia.com/advisories/49012 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 www.mandriva.com
- http://www.securityfocus.com/bid/53365 www.securityfocus.com
- http://drupal.org/node/1557938 Vendor Advisory
- http://jvn.jp/en/jp/JVN45898075/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045 jvndb.jvn.jp
- http://osvdb.org/81679 osvdb.org
- http://secunia.com/advisories/49012 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 www.mandriva.com
- http://www.securityfocus.com/bid/53365 www.securityfocus.com