CVE-2016-3164

Published Apr 12, 2016 CVSS 3.0 · 7.4 High EPSS 1.9% KEV · Not listed
Description
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code or (2) a form shown on a 404 error page, related to path manipulation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-3090 Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code or (2) a form shown on a 404 error page, related to path manipulation.
Github GHSA Github GHSA GHSA-836p-6p4j-35cg Drupal Open Redirect
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 11:47 PM
Reserved
Mar 15, 2016, 12:00 AM
Status
Modified
Published
Apr 12, 2016, 3:59 PM
Modified
Jun 17, 2026, 12:45 AM