PT-2022-9396 · Werkzeug +4 · Werkzeug +4

Name of the Vulnerable Software and Affected Versions: Flask-Security versions all Description: This issue allows an attacker to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes. The vulnerability is only exploitable if an alternative WSGI server...