flask-unchained
The quickest and easiest way to build large web apps and APIs with Flask and SQLAlchemy
Activity
- Latest release
- 2y ago
- Total releases
- 40
- Cadence
- ~daily
- Last 12 months
- 0
Details
- License
- MIT
- First release
- Dec 27, 2017
| Version | Released | |
|---|---|---|
0.10.0a2
pre
|
0.10.0a2
pre
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
0.10.0a1
pre
| ||
0.10.0b0
pre
| ||
0.10.0a0
pre
| ||
0.9.0
minor
| ||
0.8.1
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.8.0
minor
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.9
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.8
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.7
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.6
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.5
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.4
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.3
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.2
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.1
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.7.0
minor
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.6.6
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.6.5
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.6.4
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.6.3
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.6.2
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.6.1
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.6.0
minor
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.5.1
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.5.0
minor
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.4.2
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.4.1
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.4.0
minor
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.3.2
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.3.1
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.3.0
minor
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.2.2
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.2.1
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.2.0
minor
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.1.6
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.1.5
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.1.4
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.1.3
patch
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
0.1.2
initial
1 CVE
CVE-2021-23393
GHSA-pjc4-3w99-j7v4
PYSEC-2021-96
SNYK-PYTHON-FLASKUNCHAINED-1293189
Jun 15, 2021
Open redirect in Flask-Unchained
Medium
Network
Low
None
This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerability is only exploitable if an alternative WSGI server other than Werkzeug is used, or the default behaviour of Werkzeug is modified using 'autocorrect_location_header=False. Affected versions
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.3.0
0.3.1
0.3.2
0.4.0
+ 23 more Show less
0.4.1
0.4.2
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
Fixed in
0.9.0
References
Updated Sep 20, 2024 · Source: OSV.dev |