GHSA-6QMF-FJ6M-686C Open Redirect in Flask-Security-Too

Impact Flask-Security allows redirects after many successful views e.g. /login by honoring the ?next query param. There is code in FS to validate that the url specified in the next parameter is either relative OR has the same netloc network location as the requesting URL. This check utilizes...

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

Cross site scripting

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

PYSEC-2021-123

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

UBUNTU-CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

PYSEC-2021-123

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

task-manager (>=6.1.0, <=6.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.3.3)

flask-security-too PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - task-manager =6.1.0, =6.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

flexmeasures (>=0.3.1, <=0.7.1), pidb (6.1.2) +1 more potentially affected by CVE-2021-32618 via flask-security-too (>=4.0.0, <=4.0.1)

flask-security-too PYPI version =4.0.0, =0.3.1, =0.7.1 - pidb 6.1.2 - task-manager 6.4.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

task-manager (6.0.0) potentially affected by CVE-2021-32618 via flask-security-too (3.3.0)

flask-security-too PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - task-manager 6.0.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

CVE-2021-32618 Open Redirect Vulnerability

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

CVE-2021-32618

CVE-2021-32618 – Open Redirect in Flask-Security-Too . The Flask extension Flask-Security-Too contains logic to validate the URL in the next parameter, attempting to allow only relative URLs or URLs with the same netloc. However, some browsers may transform incomplete URLs (for example next=\gith...

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

faradaysec (>=3.14.1, <=3.14.4), flask-authoob (>=0.0.21, <=0.0.34) +4 more potentially affected by CVE-2021-32618 via flask-security-too (>=3.2.0rc1, <=4.0.1)

flask-security-too PYPI version =3.2.0rc1, =3.14.1, =0.0.21, =0.3.1, =4.22.0, =6.0.1, =6.0.0, =6.4.0 Source cves: CVE-2021-32618 Source advisory: MEND:CVE-2021-32618...

PT-2021-19810

Name of the Vulnerable Software and Affected Versions Flask-Security-Too versions 3.0.0 and later Description The issue allows redirects after successful views, such as /login, by honoring the ?next query param. The validation check utilizes Python's urlsplit library to ensure the URL specified i...

flask-security 输入验证错误漏洞

flask-security is a software application. Quickly add security features to Flask applications. Flask-Security-Too An input validation error vulnerability exists where an attacker could use a legitimate site to send such a link to an unsuspecting user, who could then be redirected to any site they...

Open Redirect in Flask-Security-Too

Flask-Security allows redirects after many successful views e.g. /login by honoring the ?next query param. There is code in FS to validate that the url specified in the next parameter is either relative OR has the same netloc network location as the requesting URL. This check utilizes Pythons...

CVE-2021-32618: URL Redirection to Untrusted Site

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....