Lucene search
HistoryApr 12, 2016 - 3:59 p.m.
CVE-2016-3164
cve-2016-3164
drupal
open redirect
remote attack
nvd
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
7.4 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.3%
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code or (2) a form shown on a 404 error page, related to path manipulation.
Affected configurations
Node
drupaldrupalMatch6.0
ORdrupaldrupalMatch6.0beta1
ORdrupaldrupalMatch6.0beta2
ORdrupaldrupalMatch6.0beta3
ORdrupaldrupalMatch6.0beta4
ORdrupaldrupalMatch6.0dev
ORdrupaldrupalMatch6.0rc1
ORdrupaldrupalMatch6.0rc2
ORdrupaldrupalMatch6.0rc3
ORdrupaldrupalMatch6.0rc4
ORdrupaldrupalMatch6.1
ORdrupaldrupalMatch6.2
ORdrupaldrupalMatch6.3
ORdrupaldrupalMatch6.4
ORdrupaldrupalMatch6.5
ORdrupaldrupalMatch6.6
ORdrupaldrupalMatch6.7
ORdrupaldrupalMatch6.8
ORdrupaldrupalMatch6.9
ORdrupaldrupalMatch6.10
ORdrupaldrupalMatch6.11
ORdrupaldrupalMatch6.12
ORdrupaldrupalMatch6.13
ORdrupaldrupalMatch6.14
ORdrupaldrupalMatch6.15
ORdrupaldrupalMatch6.16
ORdrupaldrupalMatch6.17
ORdrupaldrupalMatch6.18
ORdrupaldrupalMatch6.19
ORdrupaldrupalMatch6.20
ORdrupaldrupalMatch6.21
ORdrupaldrupalMatch6.22
ORdrupaldrupalMatch6.23
ORdrupaldrupalMatch6.24
ORdrupaldrupalMatch6.25
ORdrupaldrupalMatch6.26
ORdrupaldrupalMatch6.27
ORdrupaldrupalMatch6.28
ORdrupaldrupalMatch6.29
ORdrupaldrupalMatch6.30
ORdrupaldrupalMatch6.31
ORdrupaldrupalMatch6.32
ORdrupaldrupalMatch6.33
ORdrupaldrupalMatch6.34
ORdrupaldrupalMatch6.35
ORdrupaldrupalMatch6.36
ORdrupaldrupalMatch6.37
ORdrupaldrupalMatch7.0
ORdrupaldrupalMatch7.0alpha1
ORdrupaldrupalMatch7.0alpha2
ORdrupaldrupalMatch7.0alpha3
ORdrupaldrupalMatch7.0alpha4
ORdrupaldrupalMatch7.0alpha5
ORdrupaldrupalMatch7.0alpha6
ORdrupaldrupalMatch7.0alpha7
ORdrupaldrupalMatch7.0beta1
ORdrupaldrupalMatch7.0beta2
ORdrupaldrupalMatch7.0beta3
ORdrupaldrupalMatch7.0dev
ORdrupaldrupalMatch7.0rc1
ORdrupaldrupalMatch7.0rc2
ORdrupaldrupalMatch7.0rc3
ORdrupaldrupalMatch7.0rc4
ORdrupaldrupalMatch7.1
ORdrupaldrupalMatch7.2
ORdrupaldrupalMatch7.3
ORdrupaldrupalMatch7.4
ORdrupaldrupalMatch7.5
ORdrupaldrupalMatch7.6
ORdrupaldrupalMatch7.7
ORdrupaldrupalMatch7.8
ORdrupaldrupalMatch7.9
ORdrupaldrupalMatch7.10
ORdrupaldrupalMatch7.11
ORdrupaldrupalMatch7.12
ORdrupaldrupalMatch7.13
ORdrupaldrupalMatch7.14
ORdrupaldrupalMatch7.15
ORdrupaldrupalMatch7.16
ORdrupaldrupalMatch7.17
ORdrupaldrupalMatch7.18
ORdrupaldrupalMatch7.19
ORdrupaldrupalMatch7.20
ORdrupaldrupalMatch7.21
ORdrupaldrupalMatch7.22
ORdrupaldrupalMatch7.23
ORdrupaldrupalMatch7.24
ORdrupaldrupalMatch7.25
ORdrupaldrupalMatch7.26
ORdrupaldrupalMatch7.27
ORdrupaldrupalMatch7.28
ORdrupaldrupalMatch7.29
ORdrupaldrupalMatch7.30
ORdrupaldrupalMatch7.31
ORdrupaldrupalMatch7.32
ORdrupaldrupalMatch7.33
ORdrupaldrupalMatch7.34
ORdrupaldrupalMatch7.35
ORdrupaldrupalMatch7.36
ORdrupaldrupalMatch7.37
ORdrupaldrupalMatch7.38
ORdrupaldrupalMatch7.40
ORdrupaldrupalMatch7.41
ORdrupaldrupalMatch7.42
ORdrupaldrupalMatch7.x-dev
ORdrupaldrupalMatch8.0.0
ORdrupaldrupalMatch8.0.0alpha10
ORdrupaldrupalMatch8.0.0alpha11
ORdrupaldrupalMatch8.0.0alpha12
ORdrupaldrupalMatch8.0.0alpha13
ORdrupaldrupalMatch8.0.0alpha14
ORdrupaldrupalMatch8.0.0alpha15
ORdrupaldrupalMatch8.0.0alpha2
ORdrupaldrupalMatch8.0.0alpha3
ORdrupaldrupalMatch8.0.0alpha4
ORdrupaldrupalMatch8.0.0alpha5
ORdrupaldrupalMatch8.0.0alpha6
ORdrupaldrupalMatch8.0.0alpha7
ORdrupaldrupalMatch8.0.0alpha8
ORdrupaldrupalMatch8.0.0alpha9
ORdrupaldrupalMatch8.0.0beta1
ORdrupaldrupalMatch8.0.0beta10
ORdrupaldrupalMatch8.0.0beta11
ORdrupaldrupalMatch8.0.0beta12
ORdrupaldrupalMatch8.0.0beta13
ORdrupaldrupalMatch8.0.0beta14
ORdrupaldrupalMatch8.0.0beta15
ORdrupaldrupalMatch8.0.0beta16
ORdrupaldrupalMatch8.0.0beta2
ORdrupaldrupalMatch8.0.0beta3
ORdrupaldrupalMatch8.0.0beta4
ORdrupaldrupalMatch8.0.0beta6
ORdrupaldrupalMatch8.0.0beta7
ORdrupaldrupalMatch8.0.0beta9
ORdrupaldrupalMatch8.0.0rc1
ORdrupaldrupalMatch8.0.0rc2
ORdrupaldrupalMatch8.0.0rc3
ORdrupaldrupalMatch8.0.0rc4
ORdrupaldrupalMatch8.0.1
ORdrupaldrupalMatch8.0.2
ORdrupaldrupalMatch8.0.3
Node
debiandebian_linuxMatch7.0
ORdebiandebian_linuxMatch8.0
Related
github
github
Drupal Open Redirect
2022-05-17 03:57:20
prion
prion
Open redirect
2016-04-12 15:59:00
openvas
openvas
Drupal Multiple Vulnerabilities (Mar 2016) - Linux
2016-03-15 00:00:00
Drupal Multiple Vulnerabilities (Mar 2016) - Windows
2016-03-15 00:00:00
Debian: Security Advisory (DSA-3498-1)
2016-03-08 00:00:00
cvelist
cvelist
CVE-2016-3164
2016-04-12 15:00:00
nvd
nvd
CVE-2016-3164
2016-04-12 15:59:02
osv
osv
Drupal Open Redirect
2022-05-17 03:57:20
friendsofphp
friendsofphp
Open redirect via path manipulation
2016-02-15 18:57:00
Open redirect via path manipulation
2016-02-15 18:57:00
ubuntucve
ubuntucve
CVE-2016-3164
2016-04-12 00:00:00
debiancve
debiancve
CVE-2016-3164
2016-04-12 15:59:00
nessus
nessus
Drupal 7.x < 7.43 Multiple Vulnerabilities
2016-03-04 00:00:00
Debian DSA-3498-1 : drupal7 - security update
2016-02-29 00:00:00
drupal
drupal
Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001
2016-02-24 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
7.4 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.3%
Related for CVE-2016-3164