CVE-2015-7943

6.1MEDIUM

Key Information

Vendor
Drupal
Status
Drupal
Jquery Update
Labjs
Vendor
CVE Published:
18 October 2017

Summary

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.

Refferences

https://www.drupal.org/node/2598434
x_refsource_MISC
http://www.securityfocus.com/bid/77293
vdb-entryx_refsource_BID
https://www.drupal.org/forum/newsletters/security-advisor...
x_refsource_CONFIRM
https://www.drupal.org/node/2598426
x_refsource_MISC
http://www.debian.org/security/2017/dsa-3897
vendor-advisoryx_refsource_DEBIAN

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.