Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30223
HistoryApr 29, 2021 - 11:52 a.m.

Open Redirection

2021-04-2911:52:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
open redirection
drupal7
insufficient validation
malicious site
vulnerable software

EPSS

0.001

Percentile

33.8%

drupal7 is vulnerable to open redirection. Insufficient validation of the destination query parameter in the drupal_goto() function allows an attacker to redirect a user to a malicious site.