Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34575
HistoryMar 09, 2022 - 8:38 a.m.

Open Redirect

2022-03-0908:38:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.001 Low

EPSS

Percentile

45.4%

django_spirit is vulnerable to open redirect. The vulnerability exists because the return url parameter is not properly validated during login, logout, register, and resend-activation, which allows an attacker to parse malicious URLs to redirect the user.

CPENameOperatorVersion
django-spiritle0.12.2
django-spiritle0.12.2

0.001 Low

EPSS

Percentile

45.4%