Mageia: Security Advisory (MGASA-2023-0211)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-tornado packages fix security vulnerability

Remote unauthenticated attacker may redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL. CVE-2023-28370...

MGASA-2023-0211 Updated python-tornado packages fix security vulnerability

Remote unauthenticated attacker may redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL. CVE-2023-28370...

OESA-2023-1370 python-tornado security update

Tornado is an open source version of the scalable, non-blocking web server and tools. Security Fixes: Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user...

Ubuntu: Security Advisory (USN-6159-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6159-1: Tornado vulnerability

It was discovered that Tornado incorrectly handled certain redirect. An remote attacker could possibly use this issue to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

USN-6159-1 python-tornado vulnerability

It was discovered that Tornado incorrectly handled certain redirect. An remote attacker could possibly use this issue to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

Ubuntu 16.04 ESM / 23.04 : Tornado vulnerability (USN-6159-1)

The remote Ubuntu 16.04 ESM / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6159-1 advisory. It was discovered that Tornado incorrectly handled certain redirect. An remote attacker could possibly use this issue to redirect a user to an arbitrary w...

SUSE CVE-2023-28370

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

CVE-2023-28370

A vulnerability was found in the python-tornado library. This flaw causes an open redirect vulnerability that allows a remote, unauthenticated attacker to redirect a user to an arbitrary website and conduct a phishing attack by having the user access a specially crafted URL. Mitigation Mitigation...

Open redirect in Tornado

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

abracadabra (>=0.0.0 <=0.0.7), aegis-tools (>=0.0.3 <=2.3.6) +609 more potentially affected by CVE-2023-28370 via tornado (>=3.0.0 <=6.3.1)

tornado PYPI version =3.0.0, =0.0.0, =0.0.3, =1.0.0, =1.0.0, =1.0.0, =1.3.0, =3.3.3, =0.0.9.1, =6.0.2, =1.1.8, =3.9.0, =22.5.13, =0.0.2, =0.0.5 and more Source cves: CVE-2023-28370 Source advisory: OSV:GHSA-HJ3F-6GCP-JG8J...

GHSA-HJ3F-6GCP-JG8J Open redirect in Tornado

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

CVE-2023-28370

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

AZL-43486 CVE-2023-28370 affecting package python-tornado 6.2.0-1

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

DEBIAN-CVE-2023-28370

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

AZL-44277 CVE-2023-28370 affecting package python-tornado for versions less than 6.3.3-11

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

Open redirect

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

PYSEC-2023-75

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL...

abracadabra (>=0.0.0 <=0.0.7), aegis-tools (>=0.0.3 <=2.3.6) +609 more potentially affected by CVE-2023-28370 via tornado (>=3.0.0 <=6.3.1)

tornado PYPI version =3.0.0, =0.0.0, =0.0.3, =1.0.0, =1.0.0, =1.0.0, =1.3.0, =3.3.3, =0.0.9.1, =6.0.2, =1.1.8, =3.9.0, =22.5.13, =0.0.2, =0.0.5 and more Source cves: CVE-2023-28370 Source advisory: OSV:PYSEC-2023-75...