Lucene search
GoogleOSV:SUSE-SU-2024:3116-1HistorySep 03, 2024 - 3:07 p.m.
Security update for python-WebOb
2024-09-0315:07:06
Google
osv.dev
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.7
Confidence
Low
This update for python-WebOb fixes the following issues:
- CVE-2024-42353: Fixed open redirect via WebOb’s Response object in Location header (bsc#1229221)
Related
nessus
nessus
Fedora 39 : python-webob (2024-40ff0d8644)
2024-08-26 00:00:00
SUSE SLES12 Security Update : python-WebOb (SUSE-SU-2024:2969-1)
2024-08-20 00:00:00
cvelist
cvelist
openvas
openvas
openSUSE: Security Advisory for python (SUSE-SU-2024:2970-1)
2024-08-20 00:00:00
Fedora: Security Advisory (FEDORA-2024-a6817a2e80)
2024-08-26 00:00:00
Fedora: Security Advisory (FEDORA-2024-40ff0d8644)
2024-08-26 00:00:00
osv
osv
python-webob vulnerability
2024-09-02 14:34:14
python-WebOb-doc-1.8.8-1.1 on GA media
2024-08-20 00:00:00
WebOb's location header normalization during redirect leads to open redirect
2024-08-14 17:48:06
fedora
fedora
[SECURITY] Fedora 39 Update: python-webob-1.8.8-2.fc39
2024-08-26 01:32:10
[SECURITY] Fedora 40 Update: python-webob-1.8.8-2.fc40
2024-08-26 02:05:36
ubuntu
ubuntu
WebOb vulnerability
2024-09-02 00:00:00
vulnrichment
vulnrichment
cbl_mariner
cbl_mariner
CVE-2024-42353 affecting package python-webob for versions less than 1.8.8-1
2024-08-25 15:13:42
mageia
mageia
Updated python3-webob package fix security vulnerability
2024-09-17 05:41:21
debiancve
debiancve
CVE-2024-42353
2024-08-14 21:15:17
ubuntucve
ubuntucve
CVE-2024-42353
2024-08-14 00:00:00
github
github
WebOb's location header normalization during redirect leads to open redirect
2024-08-14 17:48:06
redhatcve
redhatcve
CVE-2024-42353
2024-08-16 00:12:40
veracode
veracode
Open Redirect Attack
2024-08-16 07:05:19
nvd
nvd
CVE-2024-42353
2024-08-14 21:15:17
cve
cve
CVE-2024-42353
2024-08-14 21:15:17
redhat
redhat
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.7
Confidence
Low
Related for OSV:SUSE-SU-2024:3116-1