PT-2020-21482 · Bitly · Bitlyshortener

Published 2020-10-27 · Updated 2020-10-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions bitlyshortener versions prior to 0.5.0

Description The issue arises due to an upstream breaking change by Bitly, causing the generation of invalid short URLs when a vanity domain exists.

Recommendations For versions prior to 0.5.0, upgrade bitlyshortener to 0.5.0 or newer to prevent the generation of invalid short URLs.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

GHSA-R82C-J4MQ-5XFW

Affected Products

Bitlyshortener

References · 5

• https://osv.dev/vulnerability/GHSA-r82c-j4mq-5xfw · Vendor Advisory
• https://github.com/impredicative/bitlyshortener/security/advisories/GHSA-r82c-j4mq-5xfw · Note
• https://github.com/impredicative/bitlyshortener/commit/3d412feb77f3daf6f71536463734c2119a55968d · Note
• https://github.com/impredicative/bitlyshortener/releases/tag/0.5.0 · Note
• https://pypi.org/project/bitlyshortener · Note