Lucene search

K
cvelistJpcertCVELIST:CVE-2023-28370
HistoryMay 25, 2023 - 12:00 a.m.

CVE-2023-28370

2023-05-2500:00:00
jpcert
raw.githubusercontent.com
open redirect
tornado
phishing attack
cve-2023-28370

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.7%

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.