CVE-2015-7943

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module…

published October 18, 2017

CVSS
—
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01774 · 77.9th percentile
Published
2017-10-18T18:00Z
EPSS history
Timeline
  • 18 OCT 18:00Z
    Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module…
    cvelistv5