PT-2026-95665

Name of the Vulnerable Software and Affected Versions Autobahn Python versions prior to 26.7.1 Description WebSocket endpoints that accept permessage-deflate and rely on maxMessagePayloadSize enforce the limit against the compressed frame length before inflation but fail to recheck the decompress...

SUSE CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

Open Redirect in autobahn

Autobahn|Python before 20.12.3 allows redirect header injection...

GHSA-GWP7-VQR5-H33H Open Redirect in autobahn

Autobahn|Python before 20.12.3 allows redirect header injection...

DEBIAN-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

PYSEC-2020-25

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

Design/Logic Flaw

Autobahn|Python before 20.12.3 allows redirect header injection...

UBUNTU-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

PT-2020-17388

Name of the Vulnerable Software and Affected Versions Autobahn|Python versions prior to 20.12.3 Description The issue allows redirect header injection. Recommendations For versions prior to 20.12.3, update to version 20.12.3 or later to resolve the issue...

Autobahn Python Security Bypass Vulnerability

Autobahn Python is a set of frameworks created in Python for the implementation of WebSocket and WAMP client-side and server-side . A security bypass vulnerability exists in Autobahn Python versions prior to 0.15.0. An attacker can exploit this vulnerability to perform unauthorized operations...

Autobahn|Python Origin Header Manipulation

Observation: Autobahn|Python incorrectly checks the Origin header when the 'allowedOrigins' value is set. This can allow third parties to execute legitimate requests for WAMP WebSocket requests against an Autobahn|Python/Crossbar.io server within another browser's context. Proof of Concept: The...