CVE-2015-1051

2015-01-1515:59:31

[email protected]

web.nvd.nist.gov

drupal

context ui module

open redirect vulnerability

cve-2015-1051

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.3%

JSON

Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.

Affected configurations

NVD

Node

context_projectcontextMatch7.x-3.0drupal

context_projectcontextMatch7.x-3.1drupal

context_projectcontextMatch7.x-3.2drupal

context_projectcontextMatch7.x-3.3drupal

context_projectcontextMatch7.x-3.4drupal

context_projectcontextMatch7.x-3.5drupal

Node

fedoraprojectfedoraMatch20

fedoraprojectfedoraMatch21

CPENameOperatorVersion
context_project:contextcontext project contexteq7.x-3.0
context_project:contextcontext project contexteq7.x-3.1
context_project:contextcontext project contexteq7.x-3.2
context_project:contextcontext project contexteq7.x-3.3
context_project:contextcontext project contexteq7.x-3.4
context_project:contextcontext project contexteq7.x-3.5

CPE	Name	Operator	Version
context_project:context	context project context	eq	7.x-3.0
context_project:context	context project context	eq	7.x-3.1
context_project:context	context project context	eq	7.x-3.2
context_project:context	context project context	eq	7.x-3.3
context_project:context	context project context	eq	7.x-3.4
context_project:context	context project context	eq	7.x-3.5