Medium severity6.1NVD Advisory· Published Oct 18, 2017· Updated Jun 17, 2026
CVE-2015-7943
CVE-2015-7943
Description
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
77cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*+ 55 more
- cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.31:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.32:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.39:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.40:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*
cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.0:*:*:*:*:drupal:*:*+ 6 more
- cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.4:*:*:*:*:drupal:*:*
- cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.5:*:*:*:*:drupal:*:*
- cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.6:*:*:*:*:drupal:*:*
cpe:2.3:a:labjs_project:labjs:7.x-1.0:beta1:*:*:*:drupal:*:*+ 9 more
- cpe:2.3:a:labjs_project:labjs:7.x-1.0:beta1:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.0:rc1:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.4:*:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.5:*:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.6:*:*:*:*:drupal:*:*
- cpe:2.3:a:labjs_project:labjs:7.x-1.7:*:*:*:*:drupal:*:*
- Range: <7.41
- Range: 7.x-2.x before 7.x-2.7
- Range: 7.x-1.x before 7.x-1.8
Patches
Vulnerability mechanics
References
5- www.debian.org/security/2017/dsa-3897nvdThird Party Advisory
- www.securityfocus.com/bid/77293nvdThird Party AdvisoryVDB Entry
- www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2015-10-21/drupal-core-overlay-less-criticalnvdVendor Advisory
- www.drupal.org/node/2598426nvdVendor Advisory
- www.drupal.org/node/2598434nvdVendor Advisory
News mentions
0No linked articles in our index yet.