Drupal Open Redirect
Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-1589US | medium5.8 | — | ||
Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted para… | ||||
02
references
External citations — patches, advisories, analysis.
- http://drupal.org/node/1557938WEB
- http://jvn.jp/en/jp/JVN45898075/index.htmlWEB
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045WEB
- https://nvd.nist.gov/vuln/detail/CVE-2012-1589ADVISORY
- https://web.archive.org/web/20120507035905/http://www.securityfocus.com/bid/53365WEB
- https://web.archive.org/web/20150523060428/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2013:074/?name=MDVSA-2013:074WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan