CVE-2015-3233
CVE-2015-3233
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
EPSS 2,7%
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
Sources originales
- http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161265.html
- https://www.drupal.org/node/2507741
- http://www.securityfocus.com/bid/75284
- https://www.drupal.org/node/2507735
- http://www.debian.org/security/2015/dsa-3291
- http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html
- http://www.securityfocus.com/bid/75279
- https://www.drupal.org/SA-CORE-2015-002
- https://www.drupal.org/node/2507535
- http://www.securityfocus.com/bid/75280
- https://www.drupal.org/node/2507561
- https://www.drupal.org/node/2507555
- http://www.openwall.com/lists/oss-security/2015/07/04/4
- https://www.drupal.org/node/2507729
- https://nvd.nist.gov/vuln/detail/CVE-2015-3233