PT-2012-3362 · Drupal · Drupal

Katsuhiko Nakanishi · Publicado 2012-05-18 · Atualizado 2022-05-17 · CVE-2012-1589

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.13

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL. This can be exploited through the Form API.

Recommendations For versions prior to 7.13, update to version 7.13 or later to resolve the issue.

Correção

Open Redirect

RCE

Enumeração de Fraquezas

CWE-601

CWE-20

Identificadores relacionados

CVE-2012-1589

GHSA-WWRM-8947-4M6C

Produtos afetados

Drupal

Referências · 12

• https://web.archive.org/web/20150523060428/http://mandriva.com/en/support/security/advisories/advisory/MDVSA-2013:074/?name=MDVSA-2013:074 · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000045 · Nota
• http://osvdb.org/81679 · Nota
• https://osv.dev/vulnerability/GHSA-wwrm-8947-4m6c · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-1589 · Nota de Segurança
• https://web.archive.org/web/20120507035905/http://securityfocus.com/bid/53365 · Nota
• http://drupal.org/node/1557938 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1589 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2013:074 · Aviso do Fabricante
• http://securityfocus.com/bid/53365 · Nota
• http://secunia.com/advisories/49012 · Nota
• http://jvn.jp/en/jp/JVN45898075/index.html · Nota