CVE-2012-1589

CVE-2012-1589

EPSS 1.4%

Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://drupal.org/node/1557938 http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045 http://jvn.jp/en/jp/JVN45898075/index.html http://osvdb.org/81679 http://secunia.com/advisories/49012 http://www.mandriva.com/security/advisories?name=MDVSA-2013:074 http://www.securityfocus.com/bid/53365