CVE-2013-6389: Drupal has open redirect vulnerability in the Overlay module

May 17, 2022 (updated October 30, 2024)

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

References

drupal.org/SA-CORE-2013-003
github.com/advisories/GHSA-hxg2-5c8p-ppwm
github.com/drupal/drupal
github.com/drupal/drupal/commit/782d1155c62c0a879bf587c7e40c3a13bcf6879c
nvd.nist.gov/vuln/detail/CVE-2013-6389

Detect and mitigate CVE-2013-6389 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →