Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2jpr-83rg-v67j

Опубликовано: 05 мар. 2026
Источник: github
Github: Прошло ревью
CVSS4: 5.1
CVSS3: 4.3

Описание

django-allauth has an open redirect vulnerability

An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL.

Пакеты

Наименование

django-allauth

pip
Затронутые версииВерсия исправления

< 65.14.1

65.14.1

EPSS

Процентиль: 8%
0.00029
Низкий

5.1 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
ubuntu
23 дня назад

An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL.

CVSS3: 4.3
redhat
23 дня назад

An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL.

CVSS3: 6.1
nvd
23 дня назад

An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL.

CVSS3: 6.1
debian
23 дня назад

An open redirect vulnerability exists in django-allauth versions prior ...

EPSS

Процентиль: 8%
0.00029
Низкий

5.1 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-601