CVE-2021-23401: URL Redirection to Untrusted Site

This affects all versions of package Flask-User. When using the makesafeurl function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as /////evil.com/path or \\evil.com/path. This vulnerability is only exploitable if an...

PT-2021-15492

Name of the Vulnerable Software and Affected Versions Flask-User versions all Description The issue affects the make safe url function, allowing an attacker to bypass URL validation and redirect a user to an arbitrary URL by providing multiple backslashes, such as /////evil.com/path or...

Flask-User input validation vulnerability

Flask-User is a software application. Customizable user authentication and user management, register, confirm, login, change username, password, forget password, etc. A security vulnerability exists in Flask-User, which can be exploited to bypass url authentication and redirect a user to an...

Open Redirect

Overview Flask-User is a Customizable User Authorization & User Management: Register, Confirm, Login, Change username/password, Forgot password and more. Affected versions of this package are vulnerable to Open Redirect. When using the makesafeurl function, it is possible to bypass URL validation...