CVE-2020-13662

Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. This issue affects: Drupal Drupal Core 7 version 7.70 and prior versions.

References

https://www.drupal.org/sa-core-2020-003

Affected packages

Git / github.com/drupal/drupal

Affected ranges

Type

GIT

Repo

https://github.com/drupal/drupal

Events

Introduced

497914920385b7016ac9c9367e0198530787adf2

Last affected

c62d5ba13e02923cf4f6e2a7ede0d2afcaa68043

Database specific

{
    "cpe": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "7.0"
        },
        {
            "last_affected": "7.70"
        }
    ]
}

Affected versions

7.*

7.0

7.10

7.12

7.14

7.15

7.17

7.22

7.23

7.25

7.28

7.30

7.33

7.36

7.37

7.4

7.40

7.42

7.43

7.50

7.51

7.54

7.55

7.56

7.6

7.61

7.64

7.68

7.69

7.7

7.70

7.8

7.9

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13662.json"