Lucene search
Veracode Vulnerability DatabaseVERACODE:33733HistoryJan 18, 2022 - 2:30 a.m.
Open Redirect
2022-01-1802:30:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
36.7%
flask_security is vulnerable to open redirect. The vulnerability exists in the functions get_post_logout_redirect and get_post_login_redirect without a secure validation of URL with multiple back slashes such as \\\\\evil.com/pathwhich allows attacker to redirect to attacker-controlled website.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flask-security | le | 3.0.0 | |
| flask-security-too | le | 4.0.1 | |
| flask-security | le | 3.0.0 | |
| flask-security-too | le | 4.0.1 |
Related
github
github
Flask-Security vulnerable to Open Redirect
2022-10-07 07:29:01
suse
suse
Security update for python-Flask-Security (moderate)
2022-11-01 00:00:00
Security update for python-Flask-Security-Too (moderate)
2022-11-03 00:00:00
nessus
nessus
Debian DLA-3545-1 : flask-security - LTS security update
2023-08-28 00:00:00
openSUSE 15 Security Update : python-Flask-Security (SUSE-SU-2022:3834-1)
2023-01-20 00:00:00
cve
cve
CVE-2021-23385
2022-08-02 14:15:10
ubuntucve
ubuntucve
CVE-2021-23385
2022-08-02 00:00:00
CVE-2021-32618
2021-05-17 00:00:00
cvelist
cvelist
CVE-2021-23385 Open Redirect
2022-08-02 00:00:00
freebsd
freebsd
py-flask-security -- user redirect to arbitrary URL vulnerability
2022-08-02 00:00:00
ubuntu
ubuntu
Flask-Security vulnerability
2024-05-28 00:00:00
osv
osv
flask-security - security update
2023-08-28 00:00:00
flask-security vulnerability
2024-05-28 16:08:11
Flask-Security vulnerable to Open Redirect
2022-10-07 07:29:01
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0105)
2023-03-28 00:00:00
Ubuntu: Security Advisory (USN-6792-1)
2024-05-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3867-1)
2022-11-04 00:00:00
gitlab
gitlab
URL Redirection to Untrusted Site ('Open Redirect')
2022-10-07 00:00:00
nvd
nvd
CVE-2021-23385
2022-08-02 14:15:10
mageia
mageia
Updated python-flask-security packages fix security vulnerability
2023-03-24 08:55:49
prion
prion
Input validation
2022-08-02 14:15:00
debian
debian
[SECURITY] [DLA 3545-1] flask-security security update
2023-08-28 17:06:45
debiancve
debiancve
CVE-2021-23385
2022-08-02 14:15:10
threatpost
threatpost
URL Parsing-Library Bugs Allow DoS, RCE, Spoofing & More
2022-01-10 17:55:00
thn
thn
Researchers Find Bugs in Over A Dozen Widely Used URL Parser Libraries
2022-01-10 14:35:00