CVE-2015-7881

Published: Oct 26, 2015Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access restrictions and "add unexpected content to a Colorbox" via unspecified vectors, possibly related to a link in a comment.

Affected (10)

Products: Colorbox Project: Colorbox

Colorbox Project

1 product

Colorbox

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Colorbox Project Colorbox	Version 7.x-2.0
Colorbox Project Colorbox	Version 7.x-2.1
Colorbox Project Colorbox	Version 7.x-2.2
Colorbox Project Colorbox	Version 7.x-2.3
Colorbox Project Colorbox	Version 7.x-2.4
Colorbox Project Colorbox	Version 7.x-2.5
Colorbox Project Colorbox	Version 7.x-2.6
Colorbox Project Colorbox	Version 7.x-2.7
Colorbox Project Colorbox	Version 7.x-2.8
Colorbox Project Colorbox	Version 7.x-2.9