Lucene search
GitHub Advisory DatabaseGHSA-WM86-W3CF-H6VMHistoryMay 14, 2022 - 3:36 a.m.
Drupal external link injection vulnerability
2022-05-1403:36:17
CWE-601
GitHub Advisory Database
github.com
2
Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and contributed modules. This vulnerability could allow an attacker to trick users into unwillingly navigating to an external site.
CPE configuration
drupaldrupalRange<7.57
ORdrupaldrupalRange<7.57
| CPE | Name | Operator | Version |
|---|---|---|---|
| drupal/drupal | lt | 7.57 | |
| drupal/core | lt | 7.57 |
References
github.com/advisories/GHSA-wm86-w3cf-h6vm
github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2017-6932.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2017-6932.yaml
lists.debian.org/debian-lts-announce/2018/02/msg00030.html
nvd.nist.gov/vuln/detail/CVE-2017-6932
www.debian.org/security/2018/dsa-4123
www.drupal.org/sa-core-2018-001
Related
cvelist
cvelist
CVE-2017-6932
2018-02-21 00:00:00
veracode
veracode
Open Redirect
2018-05-17 09:51:00
friendsofphp
friendsofphp
External link injection on 404 pages when linking to the current page.
2018-02-20 21:35:13
External link injection on 404 pages when linking to the current page.
2018-02-20 21:35:13
cve
cve
CVE-2017-6932
2018-03-01 23:29:00
osv
osv
CVE-2017-6932
2018-03-01 23:29:00
Drupal external link injection vulnerability
2022-05-14 03:36:17
ubuntucve
ubuntucve
CVE-2017-6932
2018-03-01 00:00:00
prion
prion
Design/Logic Flaw
2018-03-01 23:29:00
debiancve
debiancve
CVE-2017-6932
2018-03-01 23:29:00
openvas
openvas
Debian: Security Advisory (DLA-1295-1)
2018-03-26 00:00:00
Debian: Security Advisory (DSA-4123-1)
2018-02-23 00:00:00
Fedora Update for drupal7 FEDORA-2018-b9ad458866
2018-05-12 00:00:00
nessus
nessus
Debian DSA-4123-1 : drupal7 - security update
2018-02-26 00:00:00
Drupal 7.x < 7.57 Multiple Vulnerabilities (SA-CORE-2018-001)
2018-03-01 00:00:00
Debian DLA-1295-1 : drupal7 security update
2018-03-01 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: drupal7-7.58-1.fc27
2018-04-10 19:11:10
[SECURITY] Fedora 26 Update: drupal7-7.58-1.fc26
2018-04-10 18:30:33
[SECURITY] Fedora 27 Update: drupal7-7.59-1.fc27
2018-05-10 19:16:35
freebsd
freebsd
drupal -- Drupal Core - Multiple Vulnerabilities
2018-02-21 00:00:00