Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-9737
cve
2014
9737
open redirect
language switcher dropdown module
drupal
phishing
nvd
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.7%
Open redirect vulnerability in the Language Switcher Dropdown module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a block.
Affected configurations
Node
language_switcher_dropdown_projectlanguage_switcher_dropdownMatch7.x-1.0drupal
ORlanguage_switcher_dropdown_projectlanguage_switcher_dropdownMatch7.x-1.1drupal
ORlanguage_switcher_dropdown_projectlanguage_switcher_dropdownMatch7.x-1.2drupal
ORlanguage_switcher_dropdown_projectlanguage_switcher_dropdownMatch7.x-1.3drupal
Related
drupal
drupal
SA-CONTRIB-2014-006 - Language Switcher Dropdown - Open Redirect
2014-01-22 00:00:00
prion
prion
Open redirect
2015-07-06 15:59:00
nvd
nvd
CVE-2014-9737
2015-07-06 15:59:02
cvelist
cvelist
CVE-2014-9737
2022-10-03 16:20:40
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.7%
Related for CVE-2014-9737