CVE-2015-5510

Опубликовано: 18 авг. 2015

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages.

Комментарий

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Ссылки

http://www.openwall.com/lists/oss-security/2015/07/04/4
http://www.securityfocus.com/bid/75281
https://www.drupal.org/node/2507753
Patch
Vendor Advisory
https://www.drupal.org/node/2507763
Patch
http://www.openwall.com/lists/oss-security/2015/07/04/4
http://www.securityfocus.com/bid/75281
https://www.drupal.org/node/2507753
Patch
Vendor Advisory
https://www.drupal.org/node/2507763
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.0:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.1:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.2:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.3:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.4:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.5:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.6:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.7:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.8:*:*:*:*:drupal:*:*

cpe:2.3:a:content_construction_kit_project:content_construction_kit:6.x-2.9:*:*:*:*:drupal:*:*

EPSS

Процентиль: 58%

0.00359

Низкий

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8qc5-w3ch-q62j

github

больше 3 лет назад