Open Redirect Vulnerability in Drupal's Content Construction Kit
CVE-2015-5510

Currently unrated

Key Information:

Vendor: Content Construction Kit Project
Status: Content Construction Kit
Vendor: CVE Published:; 18 August 2015

🔔 Create Content Construction Kit Project Vulnerability Alert

What is CVE-2015-5510?

The Content Construction Kit (CCK) for Drupal, specifically versions 6.x-2.x prior to 6.x-2.10, contains an open redirect vulnerability. This flaw enables remote attackers to manipulate the destinations parameter, leading to the potential redirection of users to malicious websites. Such attacks exploit trusted administration pages, increasing the risk of phishing attempts and unauthorized access to sensitive user information.

References

https://www.drupal.org/node/2507753

x_refsource_MISC

http://www.securityfocus.com/bid/75281

vdb-entryx_refsource_BID

https://www.drupal.org/node/2507763

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 18, 2015
Vulnerability Reserved
Jul 10, 2015

CVE-2015-5510 Data

JSON