CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. It may be remotely exploitable.
CVE
CVE-2015-4398
Severity
MEDIUM
CVSS
5.8
EPSS
1.33%
Original NVD Description
Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors involving processing confirmation delete pages.