CVE-2015-3371

Open redirect vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
VendorProductVersion
node_invite_projectnode_invite
𝑥
≤ 6.x-2.3
𝑥
= Vulnerable software versions
References
http://www.openwall.com/lists/oss-security/2015/01/29/6
http://www.securityfocus.com/bid/74287
https://www.drupal.org/node/2415541
https://www.drupal.org/node/2415899
http://www.openwall.com/lists/oss-security/2015/01/29/6
http://www.securityfocus.com/bid/74287
https://www.drupal.org/node/2415541
https://www.drupal.org/node/2415899