VULNERABILITY INTELLIGENCE

CVE-2015-7881

CVSS score3.5 NONE
EPSS probability0.87%
CISA KEVNot currently listed
Published2015-10-26
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N

Description

The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access restrictions and "add unexpected content to a Colorbox" via unspecified vectors, possibly related to a link in a comment.

Weakness classification

  • nvd@nist.gov: CWE-284

Primary references