Description (CNA)
A vulnerability was determined in mwielgoszewski doorman up to 0.6. This issue affects the function is_safe_url of the file doorman/users/views.py. Executing a manipulation of the argument Next can lead to open redirect. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| mwielgoszewski / doorman | affected 0.1; affected 0.2; affected 0.3; affected 0.4; affected 0.5; affected 0.6 |
CWE
CWE-601
References
- https://vuldb.com/?id.344855
- https://vuldb.com/?ctiid.344855
- https://vuldb.com/?submit.748072
- https://gist.github.com/RacerZ-fighting/39f230feb0e450ae54f0a80c63c5d924
ADP enrichment
No English description supplied.
No references supplied.