Description

Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.

Remediation

References

CVE-2012-1589

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25814)

PHP Use After Free Vulnerability (CVE-2017-12932)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (6.2.1)

Liferay Portal Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43768)

WordPress Plugin Bold Page Builder Security Bypass (2.3.1)

Severity

Medium

Classification

CVE-2012-1589 CWE-20

Tags

Missing Update Known Vulnerabilities