CVE-2020-13662
Fixed in a distro release EPSS <1%
Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. This issue affects: Drupal Drupal Core 7 version 7.70 and prior versions.
Products: Drupal Core
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | drupal/core | 7.70 |
| Packagist | drupal/drupal | 7.70 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | drupal7 | 7.32-1+deb8u18 |
| Debian 9 | drupal7 | 7.52-2+deb9u10 |
| Ubuntu Pro 14.04 LTS | drupal7 | no fix |
| Ubuntu Pro 16.04 LTS | drupal7 | no fix |