What is GHSA-f9q6-69fh-4w5w?

GHSA-f9q6-69fh-4w5w is a security advisory published by GitHub Security Advisories with High severity. flask-oidc Open Redirect vulnerability

Which CVE IDs does GHSA-f9q6-69fh-4w5w cover?

GHSA-f9q6-69fh-4w5w covers the following CVE IDs: CVE-2016-1000001. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f9q6-69fh-4w5w?

GHSA-f9q6-69fh-4w5w has a CVSS v3 base score of 7.4, published by GitHub Security Advisories.

Which products are affected by GHSA-f9q6-69fh-4w5w?

GHSA-f9q6-69fh-4w5w affects 1 product, including: pip/flask-oidc:\u003c 1.0.0.

GHSA-f9q6-69fh-4w5wHighCVSS 7.4

flask-oidc Open Redirect vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

September 20, 2024

🔗 CVE IDs covered (1)

CVE-2016-1000001 →

📋 Description

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect.

🎯 Affected products1

pip/flask-oidc:< 1.0.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2016-1000001
https://github.com/puiterwijk/flask-oidc/blob/master/flask_oidc/__init__.py#L293
https://github.com/puiterwijk/flask-oidc/commit/f2ef8b4ffa445be00f6602e446e60916f4ee4d30
https://github.com/pypa/advisory-database/tree/main/vulns/flask-oidc/PYSEC-2016-25.yaml
https://github.com/advisories/GHSA-f9q6-69fh-4w5w