Description

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Remediation

References

CVE-2015-3233

Related Vulnerabilities

MySQL CVE-2015-4737 Vulnerability (CVE-2015-4737)

Ruby on Rails CVE-2021-22902 Vulnerability (CVE-2021-22902)

Nginx stack-based buffer overflow

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-8896)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41165)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2015-3233