PRIOn knowledge basePRION:CVE-2015-3233Open redirect
6.1 Medium
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.005 Low
EPSS
Percentile
76.2%
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
References
www.debian.org/security/2015/dsa-3291
www.openwall.com/lists/oss-security/2015/07/04/4
www.securityfocus.com/bid/75279
www.securityfocus.com/bid/75280
www.securityfocus.com/bid/75284
lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html
lists.fedoraproject.org/pipermail/package-announce/2015-July/161265.html
www.drupal.org/node/2507535
www.drupal.org/node/2507555
www.drupal.org/node/2507561
www.drupal.org/node/2507729
www.drupal.org/node/2507735
www.drupal.org/node/2507741
www.drupal.org/SA-CORE-2015-002
Related
6.1 Medium
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.005 Low
EPSS
Percentile
76.2%