Lucene search
PRIOn knowledge basePRION:CVE-2021-23393HistoryJun 11, 2021 - 12:15 a.m.
Input validation
2021-06-1100:15:00
PRIOn knowledge base
www.prio-n.com
2
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flask_unchained | lt | 0.9.0 |
Related
osv
osv
Open redirect in Flask-Unchained
2021-06-15 15:56:59
CVE-2021-23393
2021-06-11 00:15:09
PYSEC-2021-96
2021-06-11 00:15:00
github
github
Open redirect in Flask-Unchained
2021-06-15 15:56:59
nvd
nvd
CVE-2021-23393
2021-06-11 00:15:09
cvelist
cvelist
CVE-2021-23393 Open Redirect
2021-06-10 00:00:00
veracode
veracode
Open Redirect
2021-06-14 06:39:41
gitlab
gitlab
URL Redirection to Untrusted Site (Open Redirect)
2021-06-11 00:00:00
cve
cve
CVE-2021-23393
2021-06-11 00:15:09
threatpost
threatpost
URL Parsing-Library Bugs Allow DoS, RCE, Spoofing & More
2022-01-10 17:55:00
thn
thn
Researchers Find Bugs in Over A Dozen Widely Used URL Parser Libraries
2022-01-10 14:35:00