CVE-2021-23393

Vulnerability: Flask-Unchained before 0.9.0 has an open redirect via the _validate_redirect_url function. Providing multiple backslashes (e.g., \\evil.com/path) can bypass URL validation and redirect users to an arbitrary URL. Conditions: Exploitation is possible only if an alternative WSGI serve...

PT-2021-15487

Name of the Vulnerable Software and Affected Versions Flask-Unchained versions prior to 0.9.0 Description The issue allows bypassing URL validation and redirecting a user to an arbitrary URL by providing multiple back slashes, such as evil.com/path, when using the validate redirect url function...

CVE-2021-23393: URL Redirection to Untrusted Site

This affects the package Flask-Unchained before 0.9.0. When using the the validateredirecturl function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an...

The vulnerability of the process_headers function (gunicorn/http/wsgi.py) in the WSGI server gunicorn, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the processheaders function gunicorn/http/wsgi.py in the WSGI server gunicorn exists due to the lack of measures to neutralize CRLF sequences. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...

[SECURITY] Fedora 31 Update: python-waitress-1.4.3-1.fc31

Waitress is meant to be a production-quality pure-Python WSGI server with very acceptable performance. It has no dependencies except ones which live in the Python standard library. It runs on CPython on Unix and Windows under Python 2.6+ and Python 3.3+. It is also known to run on PyPy 1.6.0+ on...

[SECURITY] Fedora 30 Update: python-waitress-1.4.3-1.fc30

Waitress is meant to be a production-quality pure-Python WSGI server with very acceptable performance. It has no dependencies except ones which live in the Python standard library. It runs on CPython on Unix and Windows under Python 2.6+ and Python 3.3+. It is also known to run on PyPy 1.6.0+ on...

Debian: Security Advisory (DSA-4186-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...