Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-1589
5.8
MEDIUMCVSS v2
Published
May 18, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 7.3, = 7.8, = 7.7, = 7.6, = 7.5, = 7.12, = 7.11, = 7.4, = 7.10, = 7.9, = 7.1, = 7.x-dev, = 7.2NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 7.3, = 7.8, = 7.7, = 7.6, = 7.5, = 7.12, = 7.11, = 7.4, = 7.10, = 7.9, = 7.1, = 7.x-dev, = 7.2NVD