30 matches found
CVE-2015-7943
CVE-2015-7943 describes an open redirect vulnerability in Drupal 7.x where the Overlay module does not sufficiently validate URLs, enabling redirects to arbitrary sites and phishing via unspecified vectors. Affected are: Drupal core Overlay module in 7.x before 7.41; the jQuery Update module (7.x...
CVE-2015-7943: URL Redirection to Untrusted Site
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vector...
Fedora 21 : drupal7-jquery_update-2.6-1.fc21 (2015-bb714cae5f)
See jQuery Update - Less Critical - Open Redirect - SA- CONTRIB-2015-123 Changes since 7.x-2.5 3 commits: Updating overlay code to match core Issue 2466329 by hanoii: Update 1.7 to 1.7.2 Issue 1546668 by sergey.semashko, RobLoach: Update to jQuery 1.8.3 Note that Tenable Network Security has...
Fedora 22 : drupal7-jquery_update-2.6-1.fc22 (2015-3abe019550)
See jQuery Update - Less Critical - Open Redirect - SA- CONTRIB-2015-123 Changes since 7.x-2.5 3 commits: Updating overlay code to match core Issue 2466329 by hanoii: Update 1.7 to 1.7.2 Issue 1546668 by sergey.semashko, RobLoach: Update to jQuery 1.8.3 Note that Tenable Network Security has...
[SECURITY] Fedora 21 Update: drupal7-jquery_update-2.7-1.fc21
Upgrades the version of jQuery in Drupal core to a newer version of jQuery. This package provides the following Drupal module: jqueryupdate...
PT-2017-7300
Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.41 jQuery Update module versions prior to 7.x-2.7 for Drupal LABjs module versions prior to 7.x-1.8 for Drupal Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishi...
jQuery Update - Less Critical - Open Redirect - SA-CONTRIB-2015-158
The jQuery Update module enables you to update jQuery on your site. The module ships with a modified version of the core Overlay JavaScript file, which is vulnerable to an open redirect attack see SA-CORE-2015-004. Only sites with the Overlay module enabled are vulnerable. An incomplete fix for...
Drupal jQuery Update Module Open Redirect Vulnerability
Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An open redirection vulnerability exists in the Drupal jQuery Update module version 7.x-2.x before 7.x-2.6,...
jQuery Update - Less Critical - Open Redirect - SA-CONTRIB-2015-123
The jQuery Update module enables you to update jQuery on your site. The module ships with a modified version of the core Overlay JavaScript file, which is vulnerable to an open redirect attack see SA-CORE-2015-002. Only sites with the Overlay module enabled are vulnerable. CVE identifiers issued...
The jQuery version used in JIRA needs to be updated
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-43422. panel Actually the jQuery version used in JIRA is still using the function jQuery.browser which is deprecated and has been removed...