PT-2020-17388 · Python+2 · Autobahn+2

Carnil · Published 2020-12-26 · Updated 2024-06-15 · CVE-2020-35678

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Autobahn|Python versions prior to 20.12.3

Description The issue allows redirect header injection.

Recommendations For versions prior to 20.12.3, update to version 20.12.3 or later to resolve the issue.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

ALT-PU-2021-4850

BDU:2025-14668

CVE-2020-35678

GHSA-GWP7-VQR5-H33H

OPENSUSE-SU-2021:0132-1

OPENSUSE-SU-2021:0152-1

OPENSUSE-SU-2021:0176-1

OPENSUSE-SU-2021:0180-1

OPENSUSE-SU-2021_0132-1

OPENSUSE-SU-2021_0152-1

OPENSUSE-SU-2024:11216-1

OPENSUSE-SU-2024:13902-1

PYSEC-2020-25

Affected Products

Alt Linux

Autobahn

Suse

References · 33

• https://github.com/crossbario/autobahn-python/compare/v20.12.2...v20.12.3 · Patch
• https://github.com/crossbario/autobahn-python/pull/1439 · Patch
• https://ubuntu.com/security/CVE-2020-35678 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-35678 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13902-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0176-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-35678 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-25 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-35678 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14668 · Security Note
• https://osv.dev/vulnerability/GHSA-gwp7-vqr5-h33h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35678 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2021:0152-1 · Vendor Advisory
• https://autobahn.readthedocs.io/en/latest/changelog.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-35678 · Vendor Advisory