Drupal · Drupal · CVE-2015-3232
**Name of the Vulnerable Software and Affected Versions**
Drupal versions prior to 7.38
**Description**
The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the `destinations` parameter. This can be exploited by providing a malicious URL, potentially leading to phishing attacks.
**Recommendations**
For versions prior to 7.38, update to version 7.38 or later to resolve the issue. As a temporary workaround, consider restricting access to the Field UI module until the update is applied. Avoid using the `destinations` parameter in affected URLs until the issue is resolved.