Description
Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which allows remote attackers to obtain arbitrary form information via a crafted URL.
Remediation
References
Related Vulnerabilities
Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-6232)
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1500)
MediaWiki Observable Discrepancy Vulnerability (CVE-2022-41765)
Liferay Portal Session Fixation Vulnerability (CVE-2023-47798)