GitHub Advisoryadvisory · Packagist

GHSA-wwrm-8947-4m6c Drupal Open Redirect

MEDIUM Published 2022-05-17 Modified 2023-08-29 Official page ↗
Aliases
CVE-2012-1589
Ecosystem
Packagist
Packages
drupal/drupal
Severity
Moderate
Weaknesses
CWE-20, CWE-601
Reviewed
2023-08-29

Affected packages

• Packagist drupal/drupal: >= 7.0, < 7.13 → fixed in 7.13

Description

Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.

Related

Alias · CVE (1)

  • CVE-2012-1589 Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and… vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-601 URL Redirection to Untrusted Site weakness

References