GHSA-r67r-42wx-c8r7

Summary

Drupal External URL injection through URL aliases leading to Open Redirect

Severity

medium

Published

2024-05-15

References

• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2018-10-17-2.yaml
• https://github.com/drupal/drupal
• https://www.drupal.org/sa-core-2018-006

Related advisories

• GHSA-jf8c-36vw-98x4 — critical · Packagist/drupal/drupal
• GHSA-jjx7-8462-w4m4 — critical · Packagist/drupal/drupal
• CVE-2018-7602 — critical · Packagist/drupal/drupal
• CVE-2018-7600 — critical · Packagist/drupal/drupal
• CVE-2024-55638 — high · Packagist/drupal/drupal
• CVE-2024-55637 — high · Packagist/drupal/drupal
• GHSA-j66p-fvp2-fxhj — high · Packagist/drupal/drupal
• GHSA-m9fv-whq2-6wmc — high · Packagist/drupal/drupal

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity