Lucene search

K
cveMitreCVE-2015-3393
HistoryApr 21, 2015 - 6:59 p.m.

CVE-2015-3393

2015-04-2118:59:15
mitre
web.nvd.nist.gov
27
cve-2015-3393
open redirect
commerce wedeal
drupal
remote attackers
phishing attacks

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.003

Percentile

71.8%

Open redirect vulnerability in the Commerce WeDeal module before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.

Affected configurations

Nvd
Node
fibonacciorangewedealRange7.x-1.2drupal
VendorProductVersionCPE
fibonacciorangewedeal*cpe:2.3:a:fibonacciorange:wedeal:*:*:*:*:*:drupal:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.003

Percentile

71.8%

Related for CVE-2015-3393