« Volver al listado

CVE-2009-4534

Estado: ModificadaMedia (4.3)—

Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Nanwich — FAQ ASK

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-4534",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-12-31T19:30:00.750",
  "references": [
    {
      "url": "http://drupal.org/node/617444",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/36877",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://drupal.org/node/617444",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/36877",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de redirección abierta en el módulo FAQ Ask v5.x y v6.x anterior a v6.x-2.0, un módulo para Drupal, permite a atacantes remotos redireccionar a los usuarios a sitios Web de su elección y realizar ataques de phishing a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:13:50.473",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4719739-DCA6-4A4D-91CF-6D0D0C601980",
              "versionEndIncluding": "6.x-2.x-dev"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14D27875-89D8-4F12-AA31-29D404763028"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAD77496-8EE5-4B9F-B147-503D46EC642E"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "463B9767-B11A-4FAC-867E-3736E5B967C8"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94ED8BDE-BC94-41CE-8683-B30C1F74027F"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CACE287-7668-42C9-A10D-2F04ACCA9FC6"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A897842E-5998-4806-ACF6-58DCC439EE1F"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C097F6F-B744-47E1-A881-5F1DE6DB2B5C"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "851CEE68-475C-463E-B1BE-4D8A7CAF25BD"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:5.x-1.x-dev:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25F7A94D-0768-4937-9078-62CA3A66DFBD"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:6.x-1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F5A0570-F10C-4A6F-8833-DC28D24E781E"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:6.x-1.0-beta1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9322407B-D9A8-4953-9B59-D2AA98950EDA"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:6.x-1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F60BA041-722A-4096-9FF8-91B7890B5446"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:6.x-1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EB44100-3D21-454A-BB16-6AC108684CF8"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:6.x-1.x-dev:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EBE80C0-883C-4B81-A4FD-4351A5D58410"
            },
            {
              "criteria": "cpe:2.3:a:nanwich:faq_ask:6.x-2.0-alpha1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA9CDA05-6857-4AF8-8D79-EDD41E585753"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}