CVE-2015-3233
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
76.8%
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:* |
| drupal | drupal | 7.0 | cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:* |
References
lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html
lists.fedoraproject.org/pipermail/package-announce/2015-July/161265.html
www.debian.org/security/2015/dsa-3291
www.openwall.com/lists/oss-security/2015/07/04/4
www.securityfocus.com/bid/75279
www.securityfocus.com/bid/75280
www.securityfocus.com/bid/75284
www.drupal.org/node/2507535
www.drupal.org/node/2507555
www.drupal.org/node/2507561
www.drupal.org/node/2507729
www.drupal.org/node/2507735
www.drupal.org/node/2507741
www.drupal.org/SA-CORE-2015-002
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
76.8%