Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the "//" initial sequence.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2017-09-13 16:29
Updated : 2025-04-20 01:37
NVD link : CVE-2015-2750
Mitre link : CVE-2015-2750
CVE.ORG link : CVE-2015-2750
JSON object : View
Products Affected
debian
- debian_linux
drupal
- drupal
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')