Description

Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.

Remediation

References

CVE-2012-1589

Related Vulnerabilities

WordPress Plugin Telugu Bible Verse Daily Cross-Site Request Forgery (1.0)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-8394)

WordPress Plugin Kino Gallery TimThumb Arbitrary File Upload (1.0)

MediaWiki Incorrect Authorization Vulnerability (CVE-2023-22945)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13239)

Severity

Medium

Classification

CVE-2012-1589 CWE-20

Tags

Missing Update Known Vulnerabilities