{"action":"Upgrade drupal/core to 7.60 or later.","affected":[{"fixed":"7.60","introduced":"7.0"},{"fixed":"8.5.8","introduced":"8.0.0"},{"fixed":"8.6.2","introduced":"8.6.0"}],"component":"drupal/core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["7.60","8.5.8","8.6.2"],"ghsa_id":"GHSA-7f4f-p7mq-p4fv","id":"tcs_01M5KEY008B80ZDZHKH7RHA6TF","modified_at":"2024-11-29T05:49:13.822092Z","published_at":"2024-05-15T20:24:16Z","references":["https://osv.dev/vulnerability/GHSA-7f4f-p7mq-p4fv","https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2018-10-17-2.yaml","https://github.com/drupal/core","https://www.drupal.org/sa-core-2018-006"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7f4f-p7mq-p4fv","url":"https://osv.dev/vulnerability/GHSA-7f4f-p7mq-p4fv"}],"summary":"Drupal External URL injection through URL aliases leading to Open Redirect"}