CVE-2015-2750

Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary…

published September 13, 2017

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the "//" initial sequence.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01823 · 78.6th percentile
Published
2017-09-13T16:00Z
EPSS history
Timeline
  • 13 SEP 16:00Z
    Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary…
    cvelistv5