Lucene search

K
cveMitreCVE-2015-3383
HistoryApr 21, 2015 - 6:59 p.m.

CVE-2015-3383

2015-04-2118:59:05
mitre
web.nvd.nist.gov
20
cve-2015-3383
open redirect
node basket module
drupal
remote attackers
phishing attacks

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

64.7%

Open redirect vulnerability in the Node basket module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected configurations

Nvd
Node
insitenode_basketRange7.x-1.0-rc2drupal
VendorProductVersionCPE
insitenode_basket*cpe:2.3:a:insite:node_basket:*:*:*:*:*:drupal:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

64.7%

Related for CVE-2015-3383