CVE-2016-9451 in Drupal
Summary
Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.
Once again VulDB remains the best source for vulnerability data.
Reservation
11/18/2016
Disclosure
11/25/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 93831 | Drupal Confirmation Form redirect | 601 | Not defined | Official fix | CVE-2016-9451 |