What is GHSA-wwrm-8947-4m6c?

GHSA-wwrm-8947-4m6c is a security advisory published by GitHub Security Advisories with Medium severity. Drupal Open Redirect

Which CVE IDs does GHSA-wwrm-8947-4m6c cover?

GHSA-wwrm-8947-4m6c covers the following CVE IDs: CVE-2012-1589. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-wwrm-8947-4m6c?

GHSA-wwrm-8947-4m6c affects 1 product, including: composer/drupal/drupal:\u003e= 7.0, \u003c 7.13.

GHSA-wwrm-8947-4m6cMedium

Drupal Open Redirect

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

August 29, 2023

🔗 CVE IDs covered (1)

CVE-2012-1589 →

📋 Description

Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.

🎯 Affected products1

composer/drupal/drupal:>= 7.0, < 7.13

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2012-1589
http://drupal.org/node/1557938
http://jvn.jp/en/jp/JVN45898075/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045
https://web.archive.org/web/20120507035905/http://www.securityfocus.com/bid/53365
https://web.archive.org/web/20150523060428/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2013:074/?name=MDVSA-2013:074
https://github.com/advisories/GHSA-wwrm-8947-4m6c