Every CVE Search/ Get API key

DRUPAL-CONTRIB-2019-063

No scoreFix available

The External Link Filter module provides an input filter that replaces external links by a local link that redirects to the target URL.

The module did not have protection for the Redirect URL to go where content authors intended.

What each source reports

OSV No score

The External Link Filter module provides an input filter that replaces external links by a local link that redirects to the target URL.

The module did not have protection for the Redirect URL to go where content authors intended.

Record
DRUPAL-CONTRIB-2019-063
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
drupal/elf
Packagist:https://packages.drupal.org/8
before 1.2.0
1.2.0

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

DRUPAL-CONTRIB-2019-063 is a vulnerability with no CVSS score yet in drupal/elf, published August 14, 2019. No source lists public exploit code. Fixed in drupal/elf 1.2.0.

References

MoveEnter Open