Open Redirect Vulnerability in Drupal Core by Drupal

CVE-2020-13662

Summary

An open redirect vulnerability in Drupal Core can allow an attacker to deceive users into clicking on a crafted link that redirects them to an arbitrary external URL. This manipulation can facilitate phishing attacks or lead users to malicious sites, undermining the security and trust in the affected applications. The vulnerability impacts Drupal Core version 7.70 and earlier, necessitating immediate attention from users to mitigate potential risks associated with untrusted redirects.

References