Description

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Remediation

References

CVE-2015-3233

Related Vulnerabilities

Twisted Web HTTP Server Improper Certificate Validation Vulnerability (CVE-2014-7143)

WordPress Plugin UsersWP-Front-end login form, User Registration, User Profile & Members Directory for WP SQL Injection (1.2.10)

WordPress Plugin WordPress Sentinel Multiple Vulnerabilities (1.0.0)

Apache HTTP Server CVE-2012-0053 Vulnerability (CVE-2012-0053)

Oracle Application Server Other Vulnerability (CVE-2006-5353)

Severity

Medium

Classification

CVE-2015-3233

Tags

Missing Update Known Vulnerabilities