CVE-2015-3358

2015-04-2116:00:00

mitre

www.cve.org

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

68.6%

JSON

Multiple open redirect vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a destination parameter, related to callbacks that (1) enable and disable modules or (2) change variables.