Vulnerabilities

TI-2015-02969 CVE-2015-3358 · GHSA-gh67-7h4c-hhvc

Multiple open redirect vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal…

LOW 28

Multiple open redirect vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a destination parameter, rel…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0118 Published 2015-04-21 No fix listed

TI-2015-02967 CVE-2015-3356 · GHSA-6gj5-fxr2-78hx

Multiple cross-site request forgery (CSRF) vulnerabilities in the Tadaa! module before…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that (1) enable or (2) disable…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00643 Published 2015-04-21 No fix listed CWE-352

Vulnerabilities

Filters

Multiple open redirect vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal…

Multiple cross-site request forgery (CSRF) vulnerabilities in the Tadaa! module before…