CVE-2015-7943

Опубликовано: 18 окт. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.

Ссылки

http://www.debian.org/security/2017/dsa-3897
Third Party Advisory
http://www.securityfocus.com/bid/77293
Third Party Advisory
VDB Entry
https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2015-10-21/drupal-core-overlay-less-critical
Vendor Advisory
https://www.drupal.org/node/2598426
Vendor Advisory
https://www.drupal.org/node/2598434
Vendor Advisory
http://www.debian.org/security/2017/dsa-3897
Third Party Advisory
http://www.securityfocus.com/bid/77293
Third Party Advisory
VDB Entry
https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2015-10-21/drupal-core-overlay-less-critical
Vendor Advisory
https://www.drupal.org/node/2598426
Vendor Advisory
https://www.drupal.org/node/2598434
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.31:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.32:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.39:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.40:*:*:*:*:*:*:*

cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.0:*:*:*:*:drupal:*:*

cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.1:*:*:*:*:drupal:*:*

cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.2:*:*:*:*:drupal:*:*

cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.3:*:*:*:*:drupal:*:*

cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.4:*:*:*:*:drupal:*:*

cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.5:*:*:*:*:drupal:*:*

cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.6:*:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.0:*:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.0:beta1:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.0:rc1:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.1:*:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.2:*:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.3:*:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.4:*:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.5:*:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.6:*:*:*:*:drupal:*:*

cpe:2.3:a:labjs_project:labjs:7.x-1.7:*:*:*:*:drupal:*:*

EPSS

Процентиль: 70%

0.00674

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVE-2015-7943

CVSS3: 6.1

ubuntu

больше 7 лет назад

CVE-2015-7943

CVSS3: 6.1

debian

больше 7 лет назад

Open redirect vulnerability in the Overlay module in Drupal 7.x before ...

GHSA-5746-cvmj-7x62

CVSS3: 6.1

github

около 3 лет назад

EPSS

Процентиль: 70%

0.00674

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601