Read the docs
TI-2015-06609 Aliases CVE-2015-7943GHSA-5746-cvmj-7x62

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery…

Priority LOW 31CWE-601Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-601.

Summary

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3233.

Why it matters now

EPSS 0.01774 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 73

CPEVersionsRoleVendor
cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*7.0VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*7.0 alpha1VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*7.0 alpha2VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*7.0 alpha3VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*7.0 alpha4VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*7.0 alpha5VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*7.0 alpha6VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*7.0 alpha7VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*7.0 beta1VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*7.0 beta2VulnerableDrupal
  • cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:* Versions 7.0 alpha1 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:* Versions 7.0 alpha2 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:* Versions 7.0 alpha3 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:* Versions 7.0 alpha4 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:* Versions 7.0 alpha5 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:* Versions 7.0 alpha6 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:* Versions 7.0 alpha7 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:* Versions 7.0 beta1 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:* Versions 7.0 beta2 Vulnerable ·Drupal
Show 63 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*7.0 beta3VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*7.0 devVulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*7.0 rc1VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*7.0 rc2VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*7.0 rc3VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*7.0 rc4VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*7.1VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*7.2VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*7.3VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*7.4VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*7.5VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*7.6VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*7.7VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*7.8VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*7.9VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*7.10VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*7.11VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*7.12VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*7.13VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*7.14VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*7.15VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*7.16VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*7.17VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*7.18VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*7.19VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*7.20VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*7.21VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*7.22VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*7.23VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*7.24VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*7.25VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*7.26VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*7.27VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*7.28VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*7.29VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*7.30VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.31:*:*:*:*:*:*:*7.31VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.32:*:*:*:*:*:*:*7.32VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:*7.33VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:*7.34VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:*7.35VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:*7.36VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:*7.37VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:*7.38VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.39:*:*:*:*:*:*:*7.39VulnerableDrupal
cpe:2.3:a:drupal:drupal:7.40:*:*:*:*:*:*:*7.40VulnerableDrupal
cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.0:*:*:*:*:drupal:*:*7.x-2.0VulnerableJquery Update Project
cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.1:*:*:*:*:drupal:*:*7.x-2.1VulnerableJquery Update Project
cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.2:*:*:*:*:drupal:*:*7.x-2.2VulnerableJquery Update Project
cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.3:*:*:*:*:drupal:*:*7.x-2.3VulnerableJquery Update Project
cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.4:*:*:*:*:drupal:*:*7.x-2.4VulnerableJquery Update Project
cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.5:*:*:*:*:drupal:*:*7.x-2.5VulnerableJquery Update Project
cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.6:*:*:*:*:drupal:*:*7.x-2.6VulnerableJquery Update Project
cpe:2.3:a:labjs_project:labjs:7.x-1.0:*:*:*:*:drupal:*:*7.x-1.0VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.0:beta1:*:*:*:drupal:*:*7.x-1.0 beta1VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.0:rc1:*:*:*:drupal:*:*7.x-1.0 rc1VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.1:*:*:*:*:drupal:*:*7.x-1.1VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.2:*:*:*:*:drupal:*:*7.x-1.2VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.3:*:*:*:*:drupal:*:*7.x-1.3VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.4:*:*:*:*:drupal:*:*7.x-1.4VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.5:*:*:*:*:drupal:*:*7.x-1.5VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.6:*:*:*:*:drupal:*:*7.x-1.6VulnerableLabjs Project
cpe:2.3:a:labjs_project:labjs:7.x-1.7:*:*:*:*:drupal:*:*7.x-1.7VulnerableLabjs Project
  • cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:* Versions 7.0 beta3 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:* Versions 7.0 dev Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:* Versions 7.0 rc1 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:* Versions 7.0 rc2 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:* Versions 7.0 rc3 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:* Versions 7.0 rc4 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:* Versions 7.8 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:* Versions 7.9 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:* Versions 7.10 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:* Versions 7.11 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:* Versions 7.12 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:* Versions 7.13 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:* Versions 7.14 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:* Versions 7.15 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:* Versions 7.16 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:* Versions 7.17 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:* Versions 7.18 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:* Versions 7.19 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:* Versions 7.20 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:* Versions 7.21 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:* Versions 7.22 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:* Versions 7.23 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:* Versions 7.24 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:* Versions 7.25 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:* Versions 7.26 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:* Versions 7.27 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:* Versions 7.28 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:* Versions 7.29 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:* Versions 7.30 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.31:*:*:*:*:*:*:* Versions 7.31 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.32:*:*:*:*:*:*:* Versions 7.32 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:* Versions 7.33 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:* Versions 7.34 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:* Versions 7.35 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:* Versions 7.36 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:* Versions 7.37 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:* Versions 7.38 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.39:*:*:*:*:*:*:* Versions 7.39 Vulnerable ·Drupal
  • cpe:2.3:a:drupal:drupal:7.40:*:*:*:*:*:*:* Versions 7.40 Vulnerable ·Drupal
  • cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.0:*:*:*:*:drupal:*:* Versions 7.x-2.0 Vulnerable ·Jquery Update Project
  • cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.1:*:*:*:*:drupal:*:* Versions 7.x-2.1 Vulnerable ·Jquery Update Project
  • cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.2:*:*:*:*:drupal:*:* Versions 7.x-2.2 Vulnerable ·Jquery Update Project
  • cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.3:*:*:*:*:drupal:*:* Versions 7.x-2.3 Vulnerable ·Jquery Update Project
  • cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.4:*:*:*:*:drupal:*:* Versions 7.x-2.4 Vulnerable ·Jquery Update Project
  • cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.5:*:*:*:*:drupal:*:* Versions 7.x-2.5 Vulnerable ·Jquery Update Project
  • cpe:2.3:a:jquery_update_project:jquery_update:7.x-2.6:*:*:*:*:drupal:*:* Versions 7.x-2.6 Vulnerable ·Jquery Update Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.0:*:*:*:*:drupal:*:* Versions 7.x-1.0 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.0:beta1:*:*:*:drupal:*:* Versions 7.x-1.0 beta1 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.0:rc1:*:*:*:drupal:*:* Versions 7.x-1.0 rc1 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.1:*:*:*:*:drupal:*:* Versions 7.x-1.1 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.2:*:*:*:*:drupal:*:* Versions 7.x-1.2 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.3:*:*:*:*:drupal:*:* Versions 7.x-1.3 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.4:*:*:*:*:drupal:*:* Versions 7.x-1.4 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.5:*:*:*:*:drupal:*:* Versions 7.x-1.5 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.6:*:*:*:*:drupal:*:* Versions 7.x-1.6 Vulnerable ·Labjs Project
  • cpe:2.3:a:labjs_project:labjs:7.x-1.7:*:*:*:*:drupal:*:* Versions 7.x-1.7 Vulnerable ·Labjs Project

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-7943
  2. 2026-10-03 Alias added: GHSA-5746-cvmj-7x62

References

Advisory 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences