GitHub Advisoryadvisory · Packagist

GHSA-hxg2-5c8p-ppwm Drupal has open redirect vulnerability in the Overlay module

HIGH Published 2022-05-17 Modified 2024-10-30 Official page ↗
Aliases
CVE-2013-6389
Ecosystem
Packagist
Packages
drupal/drupal
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-20, CWE-601
Reviewed
2024-10-30

Affected packages

• Packagist drupal/drupal: >= 7.0, < 7.24 → fixed in 7.24

Description

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2013-6389 Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web… vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-601 URL Redirection to Untrusted Site weakness

References