{"action":"Upgrade drupal/drupal to 7.24 or later.","affected":[{"fixed":"7.24","introduced":"7.0"}],"component":"drupal/drupal","cve_ids":["CVE-2013-6389"],"ecosystem":"Packagist","epss":0.01207,"exploited":false,"fixed_versions":["7.24"],"ghsa_id":"GHSA-hxg2-5c8p-ppwm","id":"tcs_01M5KF411GQWMBNJHG6VC1WJZ2","modified_at":"2024-10-30T18:12:25.066662Z","published_at":"2022-05-17T04:55:08Z","references":["https://osv.dev/vulnerability/GHSA-hxg2-5c8p-ppwm","https://nvd.nist.gov/vuln/detail/CVE-2013-6389","https://github.com/drupal/drupal/commit/782d1155c62c0a879bf587c7e40c3a13bcf6879c","https://drupal.org/SA-CORE-2013-003","https://github.com/drupal/drupal","http://www.debian.org/security/2013/dsa-2804","http://www.openwall.com/lists/oss-security/2013/11/22/4"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hxg2-5c8p-ppwm","url":"https://osv.dev/vulnerability/GHSA-hxg2-5c8p-ppwm"}],"summary":"Drupal has open redirect vulnerability in the Overlay module"}