django_spirit is vulnerable to open redirect. The vulnerability exists because the return url
parameter is not properly validated during login, logout, register, and resend-activation, which allows an attacker to parse malicious URLs to redirect the user.
CPE | Name | Operator | Version |
---|---|---|---|
django-spirit | le | 0.12.2 | |
django-spirit | le | 0.12.2 |