GitHub Advisoryadvisory · PyPI

GHSA-4298-89hc-6rfv Open Redirect in Flask-User

MEDIUM Published 2021-08-09 Modified 2024-09-20 Official page ↗
Aliases
CVE-2021-23401
Ecosystem
PyPI
Packages
Flask-User
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weaknesses
CWE-601
Reviewed
2021-07-06

Affected packages

• PyPI Flask-User: <= 1.0.2.2 (no fix yet)

Description

This affects all versions of package Flask-User. When using the `make_safe_url` function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple backslashes such as `/////evil.com/path` or `\\\evil.com/path`. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using `autocorrect_location_header=False`.

Related

Alias · CVE (1)

  • CVE-2021-23401 This affects all versions of package Flask-User. vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References