Security advisories: Drupal core – Moderately critical – Open Redirect – SA-CORE-2020-003

0 Flares Twitter 0 Facebook 0 Filament.io 0 Flares ×
Project: 
Date: 
2020-May-20
Vulnerability: 
Open Redirect
Description: 

Drupal 7 has an Open Redirect vulnerability. For example, a user could be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL.

The vulnerability is caused by insufficient validation of the destination query parameter in the drupal_goto() function.

Other versions of Drupal core are not vulnerable.

Solution: 

Install the latest version:

Reported By: 
Fixed By: