Drupal Core Overlay Module Open Redirect Vulnerability (CVE-2015-3233)
Severity: : Critical
Advisory Date: 21 de июля de 2015
DESCRIPTION
The Overlay module displays administrative pages as a layer over the current page (using JavaScript), rather than replacing the page in the browser window. The Overlay module does not sufficiently validate URLs prior to displaying their contents, leading to an open redirect vulnerability.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1006346