4.9

CVE-2015-3378

EPSS 0.51%
Veröffentlicht 21.04.2015 18:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to the break lock page for edited views.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Views Project ≫ Views SwPlatformdrupal Version <= 6.x-2.16

Views Project ≫ Views Version6.x-3.0 SwPlatformdrupal

Views Project ≫ Views Version6.x-3.0 Updatealpha1 SwPlatformdrupal

Views Project ≫ Views Version6.x-3.0 Updatealpha2 SwPlatformdrupal

Views Project ≫ Views Version6.x-3.0 Updatealpha3 SwPlatformdrupal

Views Project ≫ Views Version6.x-3.0 Updatealpha4 SwPlatformdrupal

Views Project ≫ Views Version6.x-3.0 Updaterc2 SwPlatformdrupal

Views Project ≫ Views Version6.x-3.0 Updaterc3 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.0 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.0 Updatealpha1 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.0 Updatebeta1 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.0 Updatebeta2 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.0 Updatebeta3 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.0 Updaterc1 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.0 Updaterc3 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.1 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.2 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.3 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.4 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.5 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.6 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.7 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.8 SwPlatformdrupal

Views Project ≫ Views Version7.x-3.x Updatedev SwPlatformdrupal

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.51%	0.653

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.9	6.8	4.9	AV:N/AC:M/Au:S/C:P/I:P/A:N

http://www.openwall.com/lists/oss-security/2015/02/13/12

http://www.securityfocus.com/bid/72590

https://www.drupal.org/node/2424097

Patch

https://www.drupal.org/node/2424101

Patch

https://www.drupal.org/node/2424103

Patch

https://www.drupal.org/node/2424403

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-3378

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-3378

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-3378

EUVD