CyberRota Analysis
AI-GeneratedDrupal core versions up to 10.5.12, 10.6.11, 11.2.14, 11.3.12, and earlier versions are vulnerable to an Open Redirect flaw that could allow attackers to spoof content by redirecting users to untrusted sites. This vulnerability poses a medium risk as it can undermine user trust and facilitate phishing attacks. Organizations using affected Drupal versions should prioritize patching to mitigate potential exploitation.
Original NVD Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.
Related CVEs
Other vulnerabilities affecting the same vendor(s)