CVE-2024-42353

CVE-2024-42353 affects the Python WebOb library. The issue arises when WebOb normalizes the HTTP Location header by joining a user-provided redirect URL to the base URL using Python’s urlparse/urljoin; if the redirect starts with ‘//’, urlparse treats the next segment as a hostname, causing urljo...

Glossword v1.8.8 - 1.8.12 Arbitrary File Upload Vulnerability

This module exploits a file upload vulnerability in Glossword versions 1.8.8 to 1.8.12 when run as a standalone application. This application has an upload feature that allows an authenticated user with administrator roles to upload arbitrary files to the 'gwtemp/a/' directory. This module requir...