Description

Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. This issue affects: Drupal Drupal Core 7 version 7.70 and prior versions.

Remediation

References

CVE-2020-13662

Related Vulnerabilities

WordPress Plugin WP Symposium Multiple Vulnerabilities (14.05.02)

WordPress Plugin UpdraftPlus WordPress Backup Multiple Vulnerabilities (1.16.58)

Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2332)

Omeka Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-3981)

WordPress Plugin Easy Appointments Cross-Site Scripting (3.11.0)

Severity

Medium

Classification

CVE-2020-13662 CWE-601 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities