Lucene search
Gentoo FoundationMGASA-2023-0105HistoryMar 24, 2023 - 8:55 a.m.
Updated python-flask-security packages fix security vulnerability
2023-03-2408:55:49
Gentoo Foundation
advisories.mageia.org
16
python
flask
security
package
fix
vulnerability
open redirect
cve-2021-23385
unix
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
36.7%
Open redirect (CVE-2021-23385)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | python-flask-security | < 3.0.0-1.1 | python-flask-security-3.0.0-1.1.mga8 |
Related
suse
suse
Security update for python-Flask-Security (moderate)
2022-11-01 00:00:00
Security update for python-Flask-Security-Too (moderate)
2022-11-03 00:00:00
github
github
Flask-Security vulnerable to Open Redirect
2022-10-07 07:29:01
nessus
nessus
Debian DLA-3545-1 : flask-security - LTS security update
2023-08-28 00:00:00
openSUSE 15 Security Update : python-Flask-Security (SUSE-SU-2022:3834-1)
2023-01-20 00:00:00
cve
cve
CVE-2021-23385
2022-08-02 14:15:10
cvelist
cvelist
CVE-2021-23385 Open Redirect
2022-08-02 00:00:00
ubuntucve
ubuntucve
CVE-2021-23385
2022-08-02 00:00:00
CVE-2021-32618
2021-05-17 00:00:00
freebsd
freebsd
py-flask-security -- user redirect to arbitrary URL vulnerability
2022-08-02 00:00:00
osv
osv
flask-security - security update
2023-08-28 00:00:00
flask-security vulnerability
2024-05-28 16:08:11
Flask-Security vulnerable to Open Redirect
2022-10-07 07:29:01
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0105)
2023-03-28 00:00:00
Ubuntu: Security Advisory (USN-6792-1)
2024-05-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3867-1)
2022-11-04 00:00:00
ubuntu
ubuntu
Flask-Security vulnerability
2024-05-28 00:00:00
gitlab
gitlab
URL Redirection to Untrusted Site ('Open Redirect')
2022-10-07 00:00:00
veracode
veracode
Open Redirect
2022-01-18 02:30:26
nvd
nvd
CVE-2021-23385
2022-08-02 14:15:10
prion
prion
Input validation
2022-08-02 14:15:00
debian
debian
[SECURITY] [DLA 3545-1] flask-security security update
2023-08-28 17:06:45
debiancve
debiancve
CVE-2021-23385
2022-08-02 14:15:10
threatpost
threatpost
URL Parsing-Library Bugs Allow DoS, RCE, Spoofing & More
2022-01-10 17:55:00
thn
thn
Researchers Find Bugs in Over A Dozen Widely Used URL Parser Libraries
2022-01-10 14:35:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
36.7%
Related for MGASA-2023-0105