logo

Database

Uncontrolled external site redirect In werkzeug

Description

Open Redirect in werkzeug Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2020-287242. NVD-2020-287243. OSV-2020-287244. OSV-DEBIAN-2020-287245. GCVE-2020-287246. SECURITY-TRACKER-CVE-2020-28724

References

1. https://github.com/pallets/flask/issues/16392. https://github.com/pallets/werkzeug/issues/8223. https://github.com/pallets/werkzeug/pull/890/files4. https://github.com/pypa/advisory-database/tree/main/vulns/werkzeug/PYSEC-2020-157.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.