Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5100
HistorySep 15, 2017 - 4:31 a.m.

Open Redirect

2017-09-1504:31:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

29.7%

python-fedora is vulnerable to open redirects. The library does not check if urls passed to it are remote urls, allowing a malicious user to pass a remote malicious url to the application to cause open redirects and possibly leak CSRF tokens.

CPENameOperatorVersion
python-fedorale0.8.0

0.001 Low

EPSS

Percentile

29.7%