CVE-2015-4398
- State
- Published
- Severity
- Not scored
- Published
- Jun 16, 2015
- Updated
- Aug 6, 2024
- Reserved
- Jun 5, 2015
Description
Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors involving processing confirmation delete pages.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://www.drupal.org/node/2454885
- 73224vdb-entry
- [oss-security] 20150322 CVE requests for Drupal contributed modulesmailing-list
- [oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)mailing-list
- https://www.drupal.org/node/2454909
- https://www.drupal.org/node/2454883
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.