1 matches found
GHSA-9X43-5QCQ-H79Q Django Grappelli Open Redirect vulnerability
views/switch.py in django-grappelli aka Django Grappelli before 2.15.2 attempts to prevent external redirection with startswith"/" but this does not consider a protocol-relative URL e.g., //example.com attack...