Lucene search
Veracode Vulnerability DatabaseVERACODE:6319HistoryMay 17, 2018 - 9:51 a.m.
Open Redirect
2018-05-1709:51:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
50.7%
Drupal is vulnerable to open redirects. A malicious user can inject a malicious link to the application through the language switcher, which can then be used to cause open redirects.
| CPE | Name | Operator | Version |
|---|---|---|---|
| drupal/drupal | le | 8.4.4 | |
| drupal/core | le | 8.4.4 |
References
Related
cvelist
cvelist
CVE-2017-6932
2018-02-21 00:00:00
nvd
nvd
CVE-2017-6932
2018-03-01 23:29:00
friendsofphp
friendsofphp
External link injection on 404 pages when linking to the current page.
2018-02-20 21:35:13
External link injection on 404 pages when linking to the current page.
2018-02-20 21:35:13
ubuntucve
ubuntucve
CVE-2017-6932
2018-03-01 00:00:00
osv
osv
CVE-2017-6932
2018-03-01 23:29:00
Drupal external link injection vulnerability
2022-05-14 03:36:17
drupal7 - security update
2018-02-28 00:00:00
debiancve
debiancve
CVE-2017-6932
2018-03-01 23:29:00
prion
prion
Design/Logic Flaw
2018-03-01 23:29:00
github
github
Drupal external link injection vulnerability
2022-05-14 03:36:17
cve
cve
CVE-2017-6932
2018-03-01 23:29:00
debian
debian
[SECURITY] [DLA 1295-1] drupal7 security update
2018-02-28 15:16:47
nessus
nessus
Debian DSA-4123-1 : drupal7 - security update
2018-02-26 00:00:00
Drupal 7.x < 7.57 Multiple Vulnerabilities (SA-CORE-2018-001)
2018-03-01 00:00:00
Debian DLA-1295-1 : drupal7 security update
2018-03-01 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4123-1)
2018-02-23 00:00:00
Debian: Security Advisory (DLA-1295-1)
2018-03-26 00:00:00
Fedora Update for drupal7 FEDORA-2018-b9ad458866
2018-05-12 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: drupal7-7.58-1.fc27
2018-04-10 19:11:10
[SECURITY] Fedora 26 Update: drupal7-7.58-1.fc26
2018-04-10 18:30:33
[SECURITY] Fedora 27 Update: drupal7-7.59-1.fc27
2018-05-10 19:16:35
freebsd
freebsd
drupal -- Drupal Core - Multiple Vulnerabilities
2018-02-21 00:00:00