Lucene search
PRIOn knowledge basePRION:CVE-2021-46898HistoryOct 22, 2023 - 7:15 p.m.
Xxe
2023-10-2219:15:00
PRIOn knowledge base
www.prio-n.com
3
views/switch.py
django grappelli
2.15.2
external redirection
protocol-relative url
example.com
vulnerability
0.001 Low
EPSS
Percentile
20.6%
views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith(“/”) but this does not consider a protocol-relative URL (e.g., //example.com) attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| django_grappelli | lt | 2.15.2 |
Related
veracode
veracode
Open Redirect
2023-10-24 06:48:55
osv
osv
Django Grappelli Open Redirect vulnerability
2023-10-22 21:36:10
CVE-2021-46898
2023-10-22 19:15:08
PYSEC-2023-211
2023-10-22 19:15:00
cvelist
cvelist
CVE-2021-46898
2023-10-22 00:00:00
nessus
nessus
openvas
openvas
openSUSE: Security Advisory for python (openSUSE-SU-2024:0017-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for python (openSUSE-SU-2023:0384-1)
2024-03-04 00:00:00
cve
cve
CVE-2021-46898
2023-10-22 19:15:08
nvd
nvd
CVE-2021-46898
2023-10-22 19:15:08
github
github
Django Grappelli Open Redirect vulnerability
2023-10-22 21:36:10