GHSA-6gf6-24h2-66j4
GHSA-6gf6-24h2-66j4 · Drupal core Open Redirect vulnerability
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Drupal 7 has an Open Redirect vulnerability. For example, a user could be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. The vulnerability is caused by insufficient validation of the destination query parameter in the drupal_goto() function. Other versions of Drupal core are not vulnerable.
CVSS 4.3 · Media · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
drupal/core Packagist
- Intervalos de versiones afectados
- ECOSYSTEM: ≥ 7.0.0, < 7.70
Actualiza a 7.70