logo

Database

Uncontrolled external site redirect In flask-security-too

Description

open redirect

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-326182. NVD-2021-326183. OSV-2021-326184. GCVE-2021-32618

References

1. https://github.com/Flask-Middleware/flask-security/commit/e39bb04615050448c1b8ba4caa7dacc0edd3e4052. https://github.com/pypa/advisory-database/tree/main/vulns/flask-security-too/PYSEC-2021-123.yaml3. https://web.archive.org/web/20210517211717/https://github.com/Flask-Middleware/flask-security/issues/4864. https://web.archive.org/web/20211207121851/https://github.com/Flask-Middleware/flask-security/security/advisories/GHSA-6qmf-fj6m-686c5. https://web.archive.org/web/20220410062740/https://github.com/Flask-Middleware/flask-security/pull/4896. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32618.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.