Unscored CVE-2015-3342 EUVD-2015-3387GHSA-x94q-fwhq-76mw

Open redirect vulnerability in the Ubercart Currency Conversion module before 6.x-1.2 for Drupal allows remote attackers to redirect users …

Published Apr 21, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Open redirect vulnerability in the Ubercart Currency Conversion module before 6.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination query parameter.

References

72365 vdb-entry
https://www.drupal.org/node/2407145
https://www.drupal.org/node/2407347
[oss-security] 20150129 Re: CVEs for Drupal contributed modules - January 2015 mailing-list