CVE-2014-9363
Severity Score
5.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter.
Vulnerabilidad de redirección abierta en el formulario para editar las metaetiquetas basadas en rutas en el módulo Meta tags quick 7.x-2.x anterior a 7.x-2.8 para Drupal permite a usuarios remotos autenticados redirigir usuarios hacia sitios web arbitrarios y realizar ataques de phishing a través del parámetro destination.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-12-10 CVE Reserved
- 2014-12-10 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.drupal.org/node/2295975 | 2014-12-11 |
| URL | Date | SRC |
|---|---|---|
| https://www.drupal.org/node/2296511 | 2014-12-11 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Meta Tags Quick Project Search vendor "Meta Tags Quick Project" | Meta Tags Quick Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" | 7.x-2.0 Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" and version "7.x-2.0" | drupal |
Affected
| ||||||
| Meta Tags Quick Project Search vendor "Meta Tags Quick Project" | Meta Tags Quick Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" | 7.x-2.1 Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" and version "7.x-2.1" | drupal |
Affected
| ||||||
| Meta Tags Quick Project Search vendor "Meta Tags Quick Project" | Meta Tags Quick Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" | 7.x-2.2 Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" and version "7.x-2.2" | drupal |
Affected
| ||||||
| Meta Tags Quick Project Search vendor "Meta Tags Quick Project" | Meta Tags Quick Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" | 7.x-2.3 Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" and version "7.x-2.3" | drupal |
Affected
| ||||||
| Meta Tags Quick Project Search vendor "Meta Tags Quick Project" | Meta Tags Quick Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" | 7.x-2.4 Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" and version "7.x-2.4" | drupal |
Affected
| ||||||
| Meta Tags Quick Project Search vendor "Meta Tags Quick Project" | Meta Tags Quick Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" | 7.x-2.5 Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" and version "7.x-2.5" | drupal |
Affected
| ||||||
| Meta Tags Quick Project Search vendor "Meta Tags Quick Project" | Meta Tags Quick Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" | 7.x-2.6 Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" and version "7.x-2.6" | drupal |
Affected
| ||||||
| Meta Tags Quick Project Search vendor "Meta Tags Quick Project" | Meta Tags Quick Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" | 7.x-2.7 Search vendor "Meta Tags Quick Project" for product "Meta Tags Quick" and version "7.x-2.7" | drupal |
Affected
| ||||||