Public Download Count - Less critical - Open Redirect Vulnerability - SA-CONTRIB-2019-012

Project: Public Download CountDate: 2019-February-06Security risk: Less critical 8∕25 AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:UncommonVulnerability: Open Redirect VulnerabilityDescription: This module enables you to track download counts of files linked from a Drupal site. Links in Drupal content are rewritten to go through an intermediate page that records download stats and then redirects to the final destination.
The module did not verify that the links provided to the intermediate page were actually present in the Drupal site content and did not contain checks to prevent external sites from accessing the counter.Solution: Install the latest version:

Also see the Public Download Count project page.Reported By: 

Fixed By: 

Coordinated By: 

Path to article