p PatchFirst

CVE-2020-13662

CVE-2020-13662

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. This issue affects: Drupal Drupal Core 7 version 7.70 and prior versions.

CVSS 6.1 · Medium · EPSS 0.9% · Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • drupal core

    Versions
    • ≥ 7, ≤ 7.70: Affected (custom)

    No fix published

  • drupal/core Packagist

    Affected ranges
    • ECOSYSTEM: ≥ 7.0.0, < 7.70

    Update to 7.70

  • drupal/drupal Packagist

    Affected ranges
    • ECOSYSTEM: ≥ 7.0.0, < 7.70

    Update to 7.70

  • drupal7 Ubuntu:Pro:14.04:LTS

    Versions
    • 7.23-1
    • 7.24-1
    • 7.24-2
    • 7.26-1
    • 7.26-1ubuntu0.1
    • 7.26-1ubuntu0.1+esm1
    • 7.26-1ubuntu0.1+esm2
    • 7.26-1ubuntu0.1+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • drupal7 Ubuntu:Pro:16.04:LTS

    Versions
    • 7.38-1
    • 7.41-1
    • 7.44-1ubuntu1~16.04.0
    • 7.44-1ubuntu1~16.04.0+esm1
    • 7.44-1ubuntu1~16.04.0+esm2
    • 7.44-1ubuntu1~16.04.0+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →