CVE-2015-1051

CVE-2015-1051 describes an open redirect vulnerability in the Context UI module (versions 7.x-3.x before 7.x-3.6) for Drupal, affecting various context_project and fedoraproject products. This flaw allows remote attackers to redirect users to arbitrary external websites via a manipulated 'destination' parameter, facilitating phishing attacks. With a CVSS score of 5.8, it has a network-based attack vector and medium complexity, potentially leading to partial confidentiality and integrity impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.