Lucene search
GoogleOSV:USN-6792-1HistoryMay 28, 2024 - 4:08 p.m.
flask-security vulnerability
2024-05-2816:08:11
Google
osv.dev
3
flask-security
url validation
vulnerability
url redirection
security issue
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.8%
Naom Moshe discovered that Flask-Security incorrectly validated URLs. An attacker could use this issue to redirect users to arbitrary URLs.
Related
cve
cve
CVE-2021-23385
2022-08-02 14:15:10
ubuntucve
ubuntucve
CVE-2021-23385
2022-08-02 00:00:00
CVE-2021-32618
2021-05-17 00:00:00
nessus
nessus
Debian DLA-3545-1 : flask-security - LTS security update
2023-08-28 00:00:00
openSUSE 15 Security Update : python-Flask-Security (SUSE-SU-2022:3834-1)
2023-01-20 00:00:00
cvelist
cvelist
CVE-2021-23385 Open Redirect
2022-08-02 00:00:00
github
github
Flask-Security vulnerable to Open Redirect
2022-10-07 07:29:01
suse
suse
Security update for python-Flask-Security (moderate)
2022-11-01 00:00:00
Security update for python-Flask-Security-Too (moderate)
2022-11-03 00:00:00
gitlab
gitlab
URL Redirection to Untrusted Site ('Open Redirect')
2022-10-07 00:00:00
osv
osv
flask-security - security update
2023-08-28 00:00:00
Flask-Security vulnerable to Open Redirect
2022-10-07 07:29:01
freebsd
freebsd
py-flask-security -- user redirect to arbitrary URL vulnerability
2022-08-02 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0105)
2023-03-28 00:00:00
Debian: Security Advisory (DLA-3545-1)
2023-08-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3867-1)
2022-11-04 00:00:00
ubuntu
ubuntu
Flask-Security vulnerability
2024-05-28 00:00:00
debiancve
debiancve
CVE-2021-23385
2022-08-02 14:15:10
mageia
mageia
Updated python-flask-security packages fix security vulnerability
2023-03-24 08:55:49
prion
prion
Input validation
2022-08-02 14:15:00
debian
debian
[SECURITY] [DLA 3545-1] flask-security security update
2023-08-28 17:06:45
veracode
veracode
Open Redirect
2022-01-18 02:30:26
nvd
nvd
CVE-2021-23385
2022-08-02 14:15:10
thn
thn
Researchers Find Bugs in Over A Dozen Widely Used URL Parser Libraries
2022-01-10 14:35:00
threatpost
threatpost
URL Parsing-Library Bugs Allow DoS, RCE, Spoofing & More
2022-01-10 17:55:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.8%
Related for OSV:USN-6792-1