Vulnerability in Drupal
CVE-2009-4534
Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
EPSS: 0.009 (54.8th percentile) — read the EPSS interpretation.
Affected products
- Drupal
- Nanwich Faq_ask — versions 5.x-1.0, 5.x-1.0-beta1, 5.x-1.0-beta2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)