Security update for python-autobahn (moderate)

openSUSE Security Update: Security update for python-autobahn Announcement ID: openSUSE-SU-2021:0132-1 Rating: moderate References: 1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2020-35678

A flaw was found in python-autobahn, where it allows redirect header injection. The highest threat from this vulnerability is to confidentiality and integrity. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

Open Redirect

autobahn is vulnerable to open redirect. The vulnerability exists through the lack of encoding on the value of the redirect header...

DEBIAN-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

PYSEC-2020-25

Autobahn|Python before 20.12.3 allows redirect header injection...

UBUNTU-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

PYSEC-2020-25

Autobahn|Python before 20.12.3 allows redirect header injection...

Design/Logic Flaw

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

CVE-2020-35678 affects Autobahn|Python before 20.12.3, which is vulnerable to redirect header injection. Public details in connected documents indicate the issue is addressed by upgrading to Autobahn-Python 20.12.3 or later (fixed in 20.12.3 per openSUSE/OpenObvious advisories and PyPI release no...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

Fedora 24 : python-autobahn (2016-acda4281c9)

Security fix for Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for python-autobahn FEDORA-2016-acda4281c9

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: python-autobahn-0.10.9-1.gitcf10233.fc24

Autobahn a networking library that is part of the Autobahn project and prov ides implementations of The WebSocket Protocol http://tools.ietf.org/html/rfc6455 The Web Application Messaging Protocol WAMP http://wamp.ws for Twisted and asyncio on Python 2 & 3 and for writing servers and clients...

Autobahn Python Security Bypass Vulnerability

Autobahn Python is a set of frameworks created in Python for the implementation of WebSocket and WAMP client-side and server-side . A security bypass vulnerability exists in Autobahn Python versions prior to 0.15.0. An attacker can exploit this vulnerability to perform unauthorized operations...

Autobahn|Python Origin Header Manipulation

Observation: Autobahn|Python incorrectly checks the Origin header when the 'allowedOrigins' value is set. This can allow third parties to execute legitimate requests for WAMP WebSocket requests against an Autobahn|Python/Crossbar.io server within another browser's context. Proof of Concept: The...