Lucene search

K
osvGoogleOSV:GHSA-WM86-W3CF-H6VM
HistoryMay 14, 2022 - 3:36 a.m.

Drupal external link injection vulnerability

2022-05-1403:36:17
Google
osv.dev
2

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%

Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and contributed modules. This vulnerability could allow an attacker to trick users into unwillingly navigating to an external site.

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%