Description

Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter.

Remediation

References

CVE-2015-3232

Related Vulnerabilities

Magento Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-8232)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9711)

WordPress Plugin WP Symposium Cross-Site Scripting (13.02)

WordPress Plugin Scribble Maps Cross-Site Scripting (1.2)

Django Improper Input Validation Vulnerability (CVE-2015-5144)

Severity

Medium

Classification

CVE-2015-3232

Tags

Missing Update Known Vulnerabilities