Drupal Forward Module URI Redirection Vulnerability

Bugtraq ID:	49189
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 17 2011 12:00AM
Updated:	Aug 17 2011 12:00AM
Credit:	Christian Schmidt
Vulnerable:	Drupal Forward 7.x-1.0 Drupal Forward 6.x-1.19 Drupal Forward 6.x-1.12 Drupal Forward 6.x-1.11 Drupal Forward 6.x-1.0
Not Vulnerable:	Drupal Forward 7.x-1.1 Drupal Forward 6.x-1.20

Drupal Forward Module URI Redirection Vulnerability

The Forward module for Drupal is prone to an URI open-redirection vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can leverage this issue by injecting an external URI into the 'forward this page' link of the application. When an unsuspecting victim views the page, they may be unknowingly redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.

Forwardversions 6.x prior to 6.x-1.20 and 7.x prior to 7.x-1.1 are vulnerable.

Drupal Forward Module URI Redirection Vulnerability

An attacker can exploit this issue by injecting an external URI into the affected site.

Drupal Forward Module URI Redirection Vulnerability

Solution:
Updates are available. Please see the references for more details.


Drupal Forward 7.x-1.0

• Drupal forward-6.x-1.20.tar.gz
  http://ftp.drupal.org/files/projects/forward-6.x-1.20.tar.gz

Drupal Forward Module URI Redirection Vulnerability

References:

• Drupal Homepage (Drupal)
  
• SA-CONTRIB-2011-035 Forward module - Open redirect (Drupal)