5.8

CVE-2015-5510

Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.0 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.1 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.2 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.3 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.4 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.5 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.6 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.7 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.8 SwPlatform drupal
Content Construction Kit Project ≫ Content Construction Kit Version 6.x-2.9 SwPlatform drupal
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.84% 0.765
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2015/07/04/4
http://www.securityfocus.com/bid/75281
https://www.drupal.org/node/2507753
Patch
Vendor Advisory
https://www.drupal.org/node/2507763
Patch