Lucene search

K

Flask Unchained Security Vulnerabilities

cve
cve

CVE-2021-23393

This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alterna...

5.4CVSS

5.8AI Score

0.001EPSS

2021-06-11 12:15 AM
76
3