CVE-2020-13662: URL Redirection to Untrusted Site (Open Redirect)

May 5, 2021 (updated May 13, 2021)

Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. This issue affects: Drupal Drupal Core 7 and prior versions.

References

nvd.nist.gov/vuln/detail/CVE-2020-13662
www.drupal.org/sa-core-2020-003

Code Behaviors & Features

Detect and mitigate CVE-2020-13662 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →