Open Redirect

djangograppelli is vulnerable to Open Redirect. The library attempts to prevent external redirection with startswith/ but this does not include protocol-relative URL attacks e.g., //example.com, which allows a remote attacker to gain confidential information via views/switch.py...

Django Grappelli Open Redirect vulnerability

views/switch.py in django-grappelli aka Django Grappelli before 2.15.2 attempts to prevent external redirection with startswith"/" but this does not consider a protocol-relative URL e.g., //example.com attack...

Xxe

views/switch.py in django-grappelli aka Django Grappelli before 2.15.2 attempts to prevent external redirection with startswith"/" but this does not consider a protocol-relative URL e.g., //example.com attack...