debian/python-webob vulnerabilities

Latest debian/python-webob CVEs

Newest publication first

1. CVE-2024-42353 WebOb's location header normalization during redirect leads to open redirect

   Medium·CVSS 5.1

   Impact When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. urlparse however treats a // at the start of a string as a URI without...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.