| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/core | ≥ 7.0, < 7.60≥ 8.0.0, < 8.5.8≥ 8.6.0, < 8.6.2 | 7.608.5.88.6.2 |
The path module in Drupal allows users with the 'administer paths' to create pretty URLs for content. In certain circumstances the user can enter a particular path that triggers an open redirect to a malicious url.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free