GitHub Advisoryadvisory · PyPI

GHSA-cg8c-gc2j-2wf7 Flask-Security vulnerable to Open Redirect

MEDIUM Published 2022-10-07 Modified 2022-10-07 Official page ↗
Aliases
CVE-2021-23385
Ecosystem
PyPI
Packages
Flask-Security
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601
Reviewed
2022-10-07

Affected packages

• PyPI Flask-Security: <= 3.0.0 (no fix yet)

Description

This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as `\\\evil.com/path`. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using `'autocorrect_location_header=False`. Note: Flask-Security is not maintained anymore.

Related

Alias · CVE (1)

  • CVE-2021-23385 This affects all versions of package Flask-Security. vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References