https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:23:09.008285+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2012-avi-250 certa-2012-avi-250 — Cinq vulnérabilités ont été corrigées dans <span class="textit">Drupal</span>. Trois permettent de contourner les restr… 2026-10-09T14:23:09.012066+00:00 certa-2012-avi-250 https://cve.radiocsirt.org/vuln/euvd-2026-110454 EUVD-2026-110454 2026-10-09T14:23:09.012105+00:00 EUVD-2026-110454 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1589 fkie_cve-2012-1589 2026-10-09T14:23:09.012119+00:00

Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.

 https://cve.radiocsirt.org/vuln/ghsa-wwrm-8947-4m6c GHSA-wwrm-8947-4m6c — Drupal Open Redirect 2026-10-09T14:23:09.012147+00:00

Affected: Packagist: drupal/drupal

Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.

 https://cve.radiocsirt.org/vuln/gsd-2012-1589 gsd-2012-1589 2026-10-09T14:23:09.012169+00:00 gsd-2012-1589 https://cve.radiocsirt.org/vuln/jvndb-2012-000045 jvndb-2012-000045 2026-10-09T14:23:09.012180+00:00

Drupal's Form API fails to validate the redirect URL, which may lead to unintended information disclosure. Drupal is a content management system (CMS). Drupal's Form API fails to validate the redirect URL, which may lead to unintended information disclosure. Katsuhiko Nakanishi from NEC Nexsolutions, Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.