PT-2016-4490 · Flask · Flask-Oidc

Published 2016-10-07 · Updated 2022-05-17 · CVE-2016-1000001

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions flask-oidc versions 0.1.2 and earlier

Description The issue is related to an open redirect.

Recommendations For versions 0.1.2 and earlier, update to a version later than 0.1.2 to resolve the issue.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2016-1000001

GHSA-F9Q6-69FH-4W5W

PYSEC-2016-25

Affected Products

Flask-Oidc

References · 8

• https://github.com/puiterwijk/flask-oidc/blob/master/flask_oidc/__init__.py#L293 · Patch
• https://osv.dev/vulnerability/GHSA-f9q6-69fh-4w5w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1000001 · Security Note
• https://osv.dev/vulnerability/PYSEC-2016-25 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1000001 · Vendor Advisory
• https://github.com/puiterwijk/flask-oidc · Note
• https://github.com/puiterwijk/flask-oidc/commit/f2ef8b4ffa445be00f6602e446e60916f4ee4d30 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/flask-oidc/PYSEC-2016-25.yaml · Note