| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/core | ≥ 7.0, < 7.52≥ 8.0, < 8.2.3 | 7.528.2.3 |
| drupal | = 7.0= 7.1= 7.10= 7.11= 7.12= 7.13= 7.14= 7.15= 7.16= 7.17= 7.18= 7.19= 7.2= 7.20= 7.21= 7.22= 7.23= 7.24= 7.25= 7.26= 7.27= 7.28= 7.29= 7.3= 7.30= 7.31= 7.32= 7.33= 7.34= 7.35= 7.36= 7.37= 7.38= 7.4= 7.40= 7.41= 7.42= 7.43= 7.44= 7.50= 7.51 |
Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free