Lucene search
+L

1 matches found

OSV
OSV
added 2022/10/07 7:29 a.m.9 views

GHSA-CG8C-GC2J-2WF7 Flask-Security vulnerable to Open Redirect

This affects all versions of package Flask-Security. When using the getpostlogoutredirect and getpostloginredirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only...

6.1CVSS6AI score0.0113EPSS
SaveExploits1References4
Rows per page
Query Builder