Vulnerability Bulletins |
Drupal Core - Overlay - Less Critical - Open Redirect - SA-CORE-2015-004 |
|
| Affected software | Drupal |
|
Advisory ID: DRUPAL-SA-CORE-2015-004Project: Drupal core Version: 7.xDate: 2015-October-21Security risk: 9/25 ( Less Critical) AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:DefaultVulnerability: Open RedirectDescriptionThe Overlay module in Drupal core displays administrative pages as a layer over the current page (using JavaScript), rather than replacing the page in the browser window. The Overlay module does not sufficiently validate URLs prior to displaying their contents, leading to an More info: https://www.drupal.org/SA-CORE-2015-004 |
|