Drupal Core Overlay Module Open Redirect Vulnerability (CVE-2015-3233)
Gravité: : Critique
Date du conseil: 21 juillet 2015
Description
The Overlay module displays administrative pages as a layer over the current page (using JavaScript), rather than replacing the page in the browser window. The Overlay module does not sufficiently validate URLs prior to displaying their contents, leading to an open redirect vulnerability.
Information Exposure Rating:
Apply associated Trend Micro DPI Rules.
Solutions
Trend Micro Deep Security DPI Rule Number: 1006346