Description

Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. This issue affects: Drupal Drupal Core 7 version 7.70 and prior versions.

Remediation

References

CVE-2020-13662

Related Vulnerabilities

Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2022-2048)

Jenkins Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2017-2612)

GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45879)

WordPress Plugin Yoast SEO Cross-Site Scripting (2.1.1)

WordPress Plugin Easy Google Analytics for WordPress Cross-Site Request Forgery (1.6.0)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-601 CVE-2020-13662