CVE-2015-7943

Published Oct 18, 2017 CVSS 3.0 · 6.1 Medium EPSS 1.8% KEV · Not listed
Description
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-548-1 drupal7 security update
Debian DSA Debian DSA DSA-3897-1 drupal7 security update
EUVD EUVD EUVD-2015-7840 Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:06 AM
Reserved
Oct 23, 2015, 12:00 AM
Status
Modified
Published
Oct 18, 2017, 6:29 PM
Modified
Jun 17, 2026, 12:33 AM