Description

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Remediation

References

CVE-2013-6389

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1407)

qdPM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11811)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-27425)

WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8958)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2013-6389