Опубликовано: 12 апр. 2016
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.8
CVSS3: 7.4
Описание
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code or (2) a form shown on a 404 error page, related to path manipulation.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| kinetic | DNE |
Показывать по
10
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-apps/xenial | not-affected | 7.43-1 |
| esm-infra-legacy/trusty | needed | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE |
Показывать по
10
EPSS
Процентиль: 72%
0.007
Низкий
5.8 Medium
CVSS2
7.4 High
CVSS3
Связанные уязвимости
CVSS3: 7.4
nvd
почти 10 лет назад
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code or (2) a form shown on a 404 error page, related to path manipulation.
CVSS3: 7.4
debian
почти 10 лет назад
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might al ...
EPSS
Процентиль: 72%
0.007
Низкий
5.8 Medium
CVSS2
7.4 High
CVSS3