CVE-2017-1002150

Опубликовано: 14 сент. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection

Ссылки

https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929
Patch
Third Party Advisory
https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch
Patch
Third Party Advisory
https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929
Patch
Third Party Advisory
https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fedoraproject:python-fedora:*:*:*:*:*:*:*:*

Версия до 0.8.0 (включая)

EPSS

Процентиль: 40%

0.00187

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVE-2017-1002150

CVSS3: 6.1

ubuntu

больше 8 лет назад

python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection

CVE-2017-1002150

CVSS3: 6.1

debian

больше 8 лет назад

python-fedora 0.8.0 and lower is vulnerable to an open redirect result ...

GHSA-m242-wc86-8768

CVSS3: 6.1

github

больше 7 лет назад

python-fedora vulnerable to an open redirect resulting in loss of CSRF protection

EPSS

Процентиль: 40%

0.00187

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601