Search for vulnerabilities
| Vulnerability ID | VCID-pwkt-3drq-sueb |
| Aliases |
GHSA-7f4f-p7mq-p4fv
|
| Summary | Drupal External URL injection through URL aliases leading to Open Redirect The path module in Drupal allows users with the 'administer paths' to create pretty URLs for content. In certain circumstances the user can enter a particular path that triggers an open redirect to a malicious url. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 6.2 |
| Risk | 3.1 |
| Affected and Fixed Packages | Package Details |
| System | Score | Found at |
|---|---|---|
| cvssv3.1_qr | MODERATE | https://github.com/advisories/GHSA-7f4f-p7mq-p4fv |
| generic_textual | MODERATE | https://github.com/drupal/core |
| generic_textual | MODERATE | https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2018-10-17-2.yaml |
| generic_textual | MODERATE | https://www.drupal.org/sa-core-2018-006 |
| Reference id | Reference type | URL |
|---|---|---|
| https://github.com/drupal/core | ||
| https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2018-10-17-2.yaml | ||
| https://www.drupal.org/sa-core-2018-006 | ||
| GHSA-7f4f-p7mq-p4fv | https://github.com/advisories/GHSA-7f4f-p7mq-p4fv |
No EPSS data available for this vulnerability.
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2025-07-31T08:35:38.265331+00:00 | GithubOSV Importer | Import | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-7f4f-p7mq-p4fv/GHSA-7f4f-p7mq-p4fv.json | 37.0.0 |