What is GHSA-hxg2-5c8p-ppwm?

GHSA-hxg2-5c8p-ppwm is a security advisory published by GitHub Security Advisories with High severity. Drupal has open redirect vulnerability in the Overlay module

Which CVE IDs does GHSA-hxg2-5c8p-ppwm cover?

GHSA-hxg2-5c8p-ppwm covers the following CVE IDs: CVE-2013-6389. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hxg2-5c8p-ppwm?

GHSA-hxg2-5c8p-ppwm has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-hxg2-5c8p-ppwm?

GHSA-hxg2-5c8p-ppwm affects 1 product, including: composer/drupal/drupal:\u003e= 7.0, \u003c 7.24.

GHSA-hxg2-5c8p-ppwmHighCVSS 7.5

Drupal has open redirect vulnerability in the Overlay module

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

October 30, 2024

🔗 CVE IDs covered (1)

CVE-2013-6389 →

📋 Description

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

🎯 Affected products1

composer/drupal/drupal:>= 7.0, < 7.24

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2013-6389
https://drupal.org/SA-CORE-2013-003
http://www.debian.org/security/2013/dsa-2804
http://www.openwall.com/lists/oss-security/2013/11/22/4
https://github.com/drupal/drupal/commit/782d1155c62c0a879bf587c7e40c3a13bcf6879c
https://github.com/advisories/GHSA-hxg2-5c8p-ppwm