What’s Vulnerable › Vulnerabilities

CVE-2015-7943

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-18 · updated 2026-06-17
• Weakness: CWE-601

Description

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.

Affected products

• Drupal: 7.0, 7.0-alpha1, 7.0-alpha2, 7.0-alpha3, 7.0-alpha4, 7.0-alpha5 (+50)
• Jquery Update Project Jquery Update: 7.x-2.0, 7.x-2.1, 7.x-2.2, 7.x-2.3, 7.x-2.4, 7.x-2.5 (+1)
• Labjs Project Labjs: 7.x-1.0, 7.x-1.0-beta1, 7.x-1.0-rc1, 7.x-1.1, 7.x-1.2, 7.x-1.3 (+4)

References

• http://www.debian.org/security/2017/dsa-3897
• http://www.securityfocus.com/bid/77293
• https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2015-10-21/drupal-core-overlay-less-critical
• https://www.drupal.org/node/2598426
• https://www.drupal.org/node/2598434
• http://www.debian.org/security/2017/dsa-3897
• http://www.securityfocus.com/bid/77293
• https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2015-10-21/drupal-core-overlay-less-critical
• https://www.drupal.org/node/2598426
• https://www.drupal.org/node/2598434

Get alerted when CVE-2015-7943 or the next vulnerability affects your stack