Description

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Remediation

References

CVE-2015-3233

Related Vulnerabilities

MySQL CVE-2019-2644 Vulnerability (CVE-2019-2644)

WordPress Plugin Advanced Permalinks Cross-Site Scripting (0.1.19)

WordPress Plugin WordPress-Amazon-Associate (WPAA) Cross-Site Scripting (2.0)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44946)

Dolibarr Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2020-35136)

Severity

Medium

Classification

CVE-2015-3233

Tags

Missing Update Known Vulnerabilities