- Home
- CVEs with nessus.description==It was discovered that there was an open redirect vulnerability in drupal7, a content management framework.
The 'Overlay' module in Drupal core displays administrative pages as a layer over the current page (using JavaScript) rather than replacing the page in the browser window. The module did not sufficiently validate URLs prior to displaying their contents, leading to an open redirect vulnerability.
For Debian 7 'Wheezy', this issue has been fixed in drupal7 version 7.14-2 deb7u13.
We recommend that you upgrade your drupal7 packages.
NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top