Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal ‘Global Redirect’模块开放重定向漏洞
Vulnerability Description
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal中的Global Redirect模块中存在开放重定向漏洞，该漏洞源于应用程序对用户提供的输入未经正确验证。攻击者可利用该漏洞构造一个特制的URL诱使用户打开。当不知情受害者打开连接时，可重定向到攻击者控制的网站，有助于钓鱼攻击，也可能存在其他攻击。以下版本受到影响：Global Redirect 6.x-1.4之前版本到6.x-1.x版本、Global Redirect 7.x-1.4之前版本到7.x-1
CVSS Information
N/A
Vulnerability Type
N/A