CVE-2015-3383 Open redirect vulnerability in the Node basket module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
MediumCVSS 5.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in the Node basket module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| insite node basket | <= 7.x-1.0-rc2 | No fix listed |
References
- [oss-security] 20150213 CVE requests for Drupal contributed modules mailing-list
- 72616 vdb-entry
- www.drupal.org patch vendor-advisory