{"action":"Upgrade tornado to 6.3.2 or later.","affected":[{"fixed":"6.3.2","introduced":"0"}],"component":"tornado","cve_ids":["CVE-2023-28370"],"ecosystem":"PyPI","epss":0.01142,"exploited":false,"fixed_versions":["6.3.2"],"ghsa_id":"GHSA-hj3f-6gcp-jg8j","id":"tcs_01M5KFKTQ1SAZ1QDGVG6PXKV4H","modified_at":"2025-11-04T16:49:24.962077Z","published_at":"2023-05-25T12:30:16Z","references":["https://osv.dev/vulnerability/GHSA-hj3f-6gcp-jg8j","https://nvd.nist.gov/vuln/detail/CVE-2023-28370","https://github.com/tornadoweb/tornado/commit/32ad07c54e607839273b4e1819c347f5c8976b2f","https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2023-75.yaml","https://github.com/tornadoweb/tornado","https://github.com/tornadoweb/tornado/releases/tag/v6.3.2","https://jvn.jp/en/jp/JVN45127776","https://lists.debian.org/debian-lts-announce/2025/01/msg00000.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hj3f-6gcp-jg8j","url":"https://osv.dev/vulnerability/GHSA-hj3f-6gcp-jg8j"}],"summary":"Open redirect in Tornado"}