medium6.8
CVE-2016-9451
Drupal Open Redirect
Impact
Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | drupal/core | >= 7.0, < 7.52 | 7.52 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | Versions 7.0, 7.1, 7.2, 7.3, 7.4, 7.10 |