Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code or (2) a form shown on a 404 error page, related to path manipulation.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2016-04-12 08:59
Updated : 2016-04-12 17:55
NVD link : CVE-2016-3164
Mitre link : CVE-2016-3164
JSON object : View
CWE
Products Affected
debian
- debian_linux
drupal
- drupal