CVE-2014-9737

2022-10-0316:20:40

mitre

www.cve.org

cve-2014-9737

drupal

open redirect

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.6%

JSON

Open redirect vulnerability in the Language Switcher Dropdown module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a block.

References

osvdb.org/102382

www.drupal.org/node/1614372

www.drupal.org/node/2179123