Description
Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors involving processing confirmation delete pages.
References
- https://www.drupal.org/node/2454885
- 73224 vdb-entry
- [oss-security] 20150322 CVE requests for Drupal contributed modules mailing-list
- [oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099) mailing-list
- https://www.drupal.org/node/2454909
- https://www.drupal.org/node/2454883