GitHub Advisoryadvisory · PyPI

GHSA-564p-rx2q-4c8v BentoML Open Redirect vulnerability

MEDIUM Published 2025-03-20 Modified 2025-04-15 Official page ↗
Ecosystem
PyPI
Packages
bentoml
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601
Reviewed
2025-03-21

Affected packages

• PyPI bentoml: <= 1.3.9 (no fix yet)

Description

An open redirect vulnerability in bentoml/bentoml v1.3.9 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References