CVE-2010-2021

The CVE-2010-2021 issue affects the Drupal Global Redirect module (versions 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4). The underlying flaw is an open redirect in the q parameter when non-clean to clean is enabled, allowing remote attackers to redirect users to arbitrary sites and potenti...