Boletines de Vulnerabilidades

Drupal core - Moderately critical - Open Redirect - SA-CORE-2020-003


Información sobre el sistema

   
Software afectado Drupal

Descripción

Project: Drupal coreDate: 2020-May-20Security risk: Moderately critical 10∕25 AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:AllVulnerability: Open RedirectCVE IDs: CVE-2020-13662 Description: Drupal 7 has an Open Redirect vulnerability. For example, a user could be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL.The vulnerability is caused by insufficient validation of the destination query parameter in the drupal_goto()

More info:

https://www.drupal.org/sa-core-2020-003

Identificadores estándar

Propiedad Valor
CVE CVE-2020-13662.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2020-05-30

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT