GHSA-6gf6-24h2-66j4
GHSA-6gf6-24h2-66j4 · Drupal core Open Redirect vulnerability
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Drupal 7 has an Open Redirect vulnerability. For example, a user could be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. The vulnerability is caused by insufficient validation of the destination query parameter in the drupal_goto() function. Other versions of Drupal core are not vulnerable.
CVSS 4.3 · Moyenne · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
drupal/core Packagist
- Plages de versions concernées
- ECOSYSTEM: ≥ 7.0.0, < 7.70
Mettez à jour vers 7.70