PT-2016-4490 · Flask · Flask-Oidc

Publicado 2016-10-07 · Atualizado 2022-05-17 · CVE-2016-1000001

Positive Technologies (AI Summary)

CVSS v4.0

8.3

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions flask-oidc versions 0.1.2 and earlier

Description The issue is related to an open redirect.

Recommendations For versions 0.1.2 and earlier, update to a version later than 0.1.2 to resolve the issue.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2016-1000001

GHSA-F9Q6-69FH-4W5W

PYSEC-2016-25

Produtos afetados

Flask-Oidc

Referências · 8

• https://github.com/puiterwijk/flask-oidc/blob/master/flask_oidc/__init__.py#L293 · Correção
• https://github.com/puiterwijk/flask-oidc · Nota
• https://github.com/puiterwijk/flask-oidc/commit/f2ef8b4ffa445be00f6602e446e60916f4ee4d30 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/flask-oidc/PYSEC-2016-25.yaml · Nota
• https://osv.dev/vulnerability/GHSA-f9q6-69fh-4w5w · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1000001 · Nota de Segurança
• https://osv.dev/vulnerability/PYSEC-2016-25 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1000001 · Aviso do Fabricante