CVE-2020-28724

Опубликовано: 18 нояб. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.

Ссылки

https://github.com/pallets/flask/issues/1639
Exploit
Issue Tracking
Third Party Advisory
https://github.com/pallets/werkzeug/issues/822
Issue Tracking
Third Party Advisory
https://github.com/pallets/werkzeug/pull/890/files
Patch
Third Party Advisory
https://github.com/pallets/flask/issues/1639
Exploit
Issue Tracking
Third Party Advisory
https://github.com/pallets/werkzeug/issues/822
Issue Tracking
Third Party Advisory
https://github.com/pallets/werkzeug/pull/890/files
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:palletsprojects:werkzeug:*:*:*:*:*:*:*:*

Версия до 0.11.6 (исключая)

EPSS

Процентиль: 77%

0.01681

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVE-2020-28724

CVSS3: 6.1

ubuntu

почти 6 лет назад

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.

CVE-2020-28724

CVSS3: 5.4

redhat

почти 11 лет назад

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.

CVE-2020-28724

CVSS3: 6.1

debian

почти 6 лет назад

Open redirect vulnerability in werkzeug before 0.11.6 via a double sla ...

GHSA-3p3h-qghp-hvh2

CVSS3: 6.1

github

больше 5 лет назад

Open Redirect in werkzeug

ALT-PU-2018-3713

CVSS3: 6.1

altlinux

больше 8 лет назад

ALT-PU-2018-3713: package `python-module-werkzeug` update to version 0.14.1-alt1

EPSS

Процентиль: 77%

0.01681

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601