PyPI/flask-user CVE-2021-23401: medium 5.4, EPSS 1.11%

Open Redirect in Flask-User

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-4298-89hc-6rfv
• https://nvd.nist.gov/vuln/detail/CVE-2021-23401
• https://github.com/advisories/GHSA-4298-89hc-6rfv
• https://github.com/lingthio/Flask-User
• https://github.com/lingthio/Flask-User/blob/master/flask_user/user_manager__utils.py
• https://github.com/pypa/advisory-database/tree/main/vulns/flask-user/PYSEC-2021-337.yaml
• https://snyk.io/vuln/SNYK-PYTHON-FLASKUSER-1293188

CVE-2021-23401 · published 2021-08-09T20:44:32Z · modified 2024-09-20T18:22:30.355979Z · JSON