WebOb vulnerability

2024-09-0200:00:00

ubuntu.com

webob

ubuntu

python module

wsgi

urls

redirect

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7.4

Confidence

Low

JSON

Releases

Ubuntu 24.04 LTS
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS

Packages

python-webob - Python module providing WSGI request and response objects

Details

It was discovered that WebOb incorrectly handled certain URLs.
An attacker could possibly use this issue to control a redirect or
forward to another URL.

OSVersionArchitecturePackageVersionFilename
Ubuntu24.04noarchpython3-webob< 1:1.8.7-1ubuntu0.1.24.04.1UNKNOWN
Ubuntu24.04noarchpython-webob-doc< 1:1.8.7-1ubuntu0.1.24.04.1UNKNOWN
Ubuntu22.04noarchpython3-webob< 1:1.8.6-1.1ubuntu0.1UNKNOWN
Ubuntu22.04noarchpython-webob-doc< 1:1.8.6-1.1ubuntu0.1UNKNOWN
Ubuntu20.04noarchpython3-webob< 1:1.8.5-2ubuntu0.1UNKNOWN
Ubuntu20.04noarchpython-webob-doc< 1:1.8.5-2ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	24.04	noarch	python3-webob	< 1:1.8.7-1ubuntu0.1.24.04.1	UNKNOWN
Ubuntu	24.04	noarch	python-webob-doc	< 1:1.8.7-1ubuntu0.1.24.04.1	UNKNOWN
Ubuntu	22.04	noarch	python3-webob	< 1:1.8.6-1.1ubuntu0.1	UNKNOWN
Ubuntu	22.04	noarch	python-webob-doc	< 1:1.8.6-1.1ubuntu0.1	UNKNOWN
Ubuntu	20.04	noarch	python3-webob	< 1:1.8.5-2ubuntu0.1	UNKNOWN
Ubuntu	20.04	noarch	python-webob-doc	< 1:1.8.5-2ubuntu0.1	UNKNOWN