CVEvulnerability

CVE-2015-7943

6.1 MEDIUM Published 2017-10-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-10-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-601

Description

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.

Affected configurations

• drupal drupal 7.0 • drupal drupal 7.1 • drupal drupal 7.2 • drupal drupal 7.3 • drupal drupal 7.4 • drupal drupal 7.5 • drupal drupal 7.6 • drupal drupal 7.7 • drupal drupal 7.8 • drupal drupal 7.9 • drupal drupal 7.10 • drupal drupal 7.11 • drupal drupal 7.12 • drupal drupal 7.13 • drupal drupal 7.14 • drupal drupal 7.15 • drupal drupal 7.16 • drupal drupal 7.17 • drupal drupal 7.18 • drupal drupal 7.19 • drupal drupal 7.20 • drupal drupal 7.21 • drupal drupal 7.22 • drupal drupal 7.23 • drupal drupal 7.24 • drupal drupal 7.25 • drupal drupal 7.26 • drupal drupal 7.27 • drupal drupal 7.28 • drupal drupal 7.29 • drupal drupal 7.30 • drupal drupal 7.31 • drupal drupal 7.32 • drupal drupal 7.33 • drupal drupal 7.34 • drupal drupal 7.35 • drupal drupal 7.36 • drupal drupal 7.37 • drupal drupal 7.38 • drupal drupal 7.39 • drupal drupal 7.40 • jquery update project jquery update 7.x-2.0 • jquery update project jquery update 7.x-2.1 • jquery update project jquery update 7.x-2.2 • jquery update project jquery update 7.x-2.3 • jquery update project jquery update 7.x-2.4 • jquery update project jquery update 7.x-2.5 • jquery update project jquery update 7.x-2.6 • labjs project labjs 7.x-1.0 • labjs project labjs 7.x-1.1 • labjs project labjs 7.x-1.2 • labjs project labjs 7.x-1.3 • labjs project labjs 7.x-1.4 • labjs project labjs 7.x-1.5 • labjs project labjs 7.x-1.6 • labjs project labjs 7.x-1.7

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References