6.1
CVE-2015-7943
- EPSS 1.77%
- Veröffentlicht 18.10.2017 18:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Erkennungen
LoginOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jquery Update Project ≫ Jquery Update Version 7.x-2.0 SwPlatform drupal
Jquery Update Project ≫ Jquery Update Version 7.x-2.1 SwPlatform drupal
Jquery Update Project ≫ Jquery Update Version 7.x-2.2 SwPlatform drupal
Jquery Update Project ≫ Jquery Update Version 7.x-2.3 SwPlatform drupal
Jquery Update Project ≫ Jquery Update Version 7.x-2.4 SwPlatform drupal
Jquery Update Project ≫ Jquery Update Version 7.x-2.5 SwPlatform drupal
Jquery Update Project ≫ Jquery Update Version 7.x-2.6 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.0 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.0 Update beta1 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.0 Update rc1 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.1 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.2 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.3 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.4 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.5 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.6 SwPlatform drupal
Labjs Project ≫ Labjs Version 7.x-1.7 SwPlatform drupal
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.77% | 0.753 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.1 | 2.8 | 2.7 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
| NIST | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
http://www.debian.org/security/2017/dsa-3897
http://www.securityfocus.com/bid/77293
https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2015-10-21/drupal-core-overlay-less-critical
https://www.drupal.org/node/2598426
https://www.drupal.org/node/2598434