Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38659
HistoryDec 27, 2022 - 5:01 a.m.

Open Redirect

2022-12-2705:01:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
rdiffweb
open redirect
improper validation
header value
attacker
invalid input

EPSS

0.001

Percentile

30.3%

rdiffweb is vulnerable to open redirect. The vulnerability exists in rdw_app.py due to improper validation of the header value which allows an attacker to redirect the user to supply invalid input.

EPSS

0.001

Percentile

30.3%

Related for VERACODE:38659