Description
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.
Remediation
References
Related Vulnerabilities
PHP Integer Overflow or Wraparound Vulnerability (CVE-2024-11236)
PHP Use of Externally-Controlled Format String Vulnerability (CVE-2009-0754)
WordPress Plugin Thrive Apprentice Security Bypass (2.3.9.3)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4200)
WordPress Plugin Kraken.io Image Optimizer Cross-Site Request Forgery (2.6.5)