Security readout for executives and security teams
Plain-English summary
Drupal 7 sites running version 7.70 or earlier may let a crafted link redirect users to an arbitrary external website. This is mainly a trust and phishing risk: users may believe they are following a legitimate Drupal-site link while being sent elsewhere.
Executive priority
Treat this as a moderate-priority trust and phishing issue, not a confirmed system compromise. Patch or retire affected Drupal 7 sites through vendor guidance, especially public-facing sites used by customers or staff.
Technical view
The CVE describes an open redirect in Drupal Core affecting Drupal 7 version 7.70 and prior. The provided sources do not include CVSS, CWE, exploit details, or patch version text. The authoritative remediation reference is Drupal SA-CORE-2020-003.
Likely exposure
Exposure is likely limited to Drupal Core 7 installations at version 7.70 or earlier. The bundle does not identify Drupal 8/9 exposure, specific modules, configurations, or required privileges.
Exploitation context
The source bundle does not report active exploitation, and this CVE is not marked CISA KEV. The described attack requires tricking a user into visiting a specially crafted link that redirects to an attacker-chosen external URL.
Researcher notes
Evidence is narrow: affected product and version are stated, but no CVSS, CWE, exploit status, or fix version is included in the bundle. Avoid expanding scope beyond Drupal Core 7.70 and prior without consulting the Drupal advisory.
Mitigation direction
- Identify all Drupal 7 sites and record exact core versions.
- Review Drupal SA-CORE-2020-003 for the vendor-supported remediation path.
- Prioritize updating sites running Drupal Core 7.70 or earlier.
- Use web filtering or user awareness controls to reduce phishing impact.
- Monitor logs for unusual external redirect patterns from trusted domains.
Validation and detection
- Confirm whether any production site runs Drupal Core 7.70 or earlier.
- Check vulnerability scanners flag CVE-2020-13662 only on affected Drupal 7 versions.
- Review redirect-related logs for unexpected external destinations.
- Verify remediation against Drupal SA-CORE-2020-003 guidance.
- Document remaining unsupported or legacy Drupal 7 assets.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2020-13662 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.drupal.org/sa-core-2020-003CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.