Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| drupal/drupal(Packagist) | 7.0 | 7.13 | N/A |
CVSS Metrics
