CVE-2015-3378: Medium severity drupal views vulnerability
Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to the break lock page for edited views.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3378?
CVE-2015-3378 has a moderate severity rating due to its potential for phishing attacks through arbitrary redirects.
How do I fix CVE-2015-3378?
To fix CVE-2015-3378, update the Views module to version 6.x-2.18, 6.x-3.2, or 7.x-3.10 or later.
What versions of the Views module are affected by CVE-2015-3378?
CVE-2015-3378 affects the Views module versions prior to 6.x-2.18, 6.x-3.2, and 7.x-3.10.
Who can exploit CVE-2015-3378?
CVE-2015-3378 can be exploited by remote authenticated users who have access to the Views UI submodule.
What are the risks associated with CVE-2015-3378?
The risks associated with CVE-2015-3378 include the potential for users to be redirected to malicious websites, leading to phishing attacks.