PyPI/python-fedora CVE-2017-1002150: unknown, EPSS 0.99%
python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection
Action: Upgrade python-fedora to 0.9.0 or later.
pip install python-fedora==0.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
- osv: PYSEC-2017-27
- https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch
- https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929
- https://github.com/advisories/GHSA-m242-wc86-8768
CVE-2017-1002150 · published · modified · JSON