Drupal Janrain Capture third party module versions 6.x and 7.x suffer from an open redirect vulnerability.