CVE-2015-3371 - Open redirect vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter

Back Back to CVE browser

MEDIUM

Open redirect vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter

Published Apr 21, 2015

5.8

MEDIUM

CVSS 2.0

EPSS 1.18%

Description

Open redirect vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://www.openwall.com/lists/oss-security/2015/01/29/6
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/74287
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3416
Advisory
https://www.drupal.org/node/2415541
x_refsource_CONFIRMPatch
https://www.drupal.org/node/2415899
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2015/01/29/6		mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/74287		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3416		Advisory
https://www.drupal.org/node/2415541		x_refsource_CONFIRMPatch
https://www.drupal.org/node/2415899		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 21, 2015

Updated Aug 6, 2024

Reserved Apr 21, 2015

Link CVE-2015-3371

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-3371

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 21, 2015

Updated Aug 6, 2024

Link EUVD-2015-3416

GitHub

No data