PT-2023-8085 · Pypi+1 · Flask-Security-Too+2
Brandon T. Elliott
·
Published
2023-12-15
·
Updated
2026-04-22
·
CVE-2023-49438
CVSS v2.0
6.4
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Flask-Security-Too versions <=5.3.2
Description
The issue is related to an open redirect vulnerability that allows attackers to redirect users to malicious sites via a crafted URL by abusing the
next parameter on the "/login" and "/register" routes. This is possible due to the way the package validates URLs specified within the next parameter, which can be bypassed. The vulnerability is further complicated by how web browsers normalize slashes in URLs, making the package vulnerable through version <=5.3.2. Additionally, the use of Werkzeug >=2.1.0 may impact applications that were previously not affected, as the autocorrect location header configuration was changed to False, making location headers in redirects relative by default.Recommendations
For Flask-Security-Too versions <=5.3.2, update to a version greater than 5.3.2 to resolve the issue.
As a temporary workaround, consider restricting access to the
/login and /register routes to minimize the risk of exploitation.
Avoid using the next parameter in the affected API endpoints until the issue is resolved.Exploit
Fix
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Flask-Security-Too
Red Os
Werkzeug