flask-authoob (>=0.0.21, <=0.0.34) potentially affected by CVE-2021-32618 via flask-security-too (3.2.0rc1)

flask-security-too PYPI version 3.2.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - flask-authoob =0.0.21, =0.0.34 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

flexmeasures (>=0.3.1, <=0.7.1), pidb (6.1.2) +1 more potentially affected by CVE-2021-32618 via flask-security-too (>=4.0.0, <=4.0.1)

flask-security-too PYPI version =4.0.0, =0.3.1, =0.7.1 - pidb 6.1.2 - task-manager 6.4.0 Source cves: CVE-2021-32618 Source advisory: GHSA-6QMF-FJ6M-686C...

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

flexmeasures (>=0.3.1, <=0.7.1), pidb (6.1.2) +1 more potentially affected by CVE-2021-32618 via flask-security-too (>=4.0.0, <=4.0.1)

flask-security-too PYPI version =4.0.0, =0.3.1, =0.7.1 - pidb 6.1.2 - task-manager 6.4.0 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

Open Redirect in Flask-Security-Too

Impact Flask-Security allows redirects after many successful views e.g. /login by honoring the ?next query param. There is code in FS to validate that the url specified in the next parameter is either relative OR has the same netloc network location as the requesting URL. This check utilizes...

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

UBUNTU-CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

Cross site scripting

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

PYSEC-2021-123

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

task-manager (6.0.0) potentially affected by CVE-2021-32618 via flask-security-too (3.3.0)

flask-security-too PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - task-manager 6.0.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

task-manager (>=6.1.0, <=6.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.3.3)

flask-security-too PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - task-manager =6.1.0, =6.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

flexmeasures (>=0.3.1, <=0.7.1), pidb (6.1.2) +1 more potentially affected by CVE-2021-32618 via flask-security-too (>=4.0.0, <=4.0.1)

flask-security-too PYPI version =4.0.0, =0.3.1, =0.7.1 - pidb 6.1.2 - task-manager 6.4.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

PYSEC-2021-123

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

faradaysec (>=3.14.1, <=3.14.4), flask-authoob (>=0.0.21, <=0.0.34) +4 more potentially affected by CVE-2021-32618 via flask-security-too (>=3.2.0rc1, <=4.0.1)

flask-security-too PYPI version =3.2.0rc1, =3.14.1, =0.0.21, =0.3.1, =4.22.0, =6.0.1, =6.0.0, =6.4.0 Source cves: CVE-2021-32618 Source advisory: MEND:CVE-2021-32618...

CVE-2021-32618

CVE-2021-32618 – Open Redirect in Flask-Security-Too . The Flask extension Flask-Security-Too contains logic to validate the URL in the next parameter, attempting to allow only relative URLs or URLs with the same netloc. However, some browsers may transform incomplete URLs (for example next=\gith...

CVE-2021-32618 Open Redirect Vulnerability

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....