CVE-2020-35678
CVE-2020-35678
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Autobahn|Python before 20.12.3 allows redirect header injection.
CVSS 6.1 · Medium · EPSS 1.4% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
python-autobahn Debian:12
- Affected ranges
- ECOSYSTEM: < 17.10.1+dfsg1-7
Update to 17.10.1+dfsg1-7
python-autobahn Debian:13
- Affected ranges
- ECOSYSTEM: < 17.10.1+dfsg1-7
Update to 17.10.1+dfsg1-7
python-autobahn Debian:14
- Affected ranges
- ECOSYSTEM: < 17.10.1+dfsg1-7
Update to 17.10.1+dfsg1-7
autobahn PyPI
- Versions
- 0.10.0
- 0.10.1
- 0.10.2
- 0.10.3
- 0.10.4
- 0.10.5
- 0.10.5.post2
- 0.10.6
- 0.10.7
- 0.10.8
- 0.10.9
- 0.11.0
- 0.12.0
- 0.12.1
- 0.13.0
- 0.13.1
- 0.14.0
- 0.14.1
- 0.15.0
- 0.16.0
- 0.16.1
- 0.17.0
- 0.17.1
- 0.17.2
- 0.18.0
- 0.18.1
- 0.18.2
- 0.3.1
- 0.3.2
- 0.4.0
- 0.4.1
- 0.4.10
- 0.4.2
- 0.4.3
- 0.5.0
- 0.5.1
- 0.5.14
- 0.5.2
- 0.5.5
- 0.5.8
- 0.5.9
- 0.6.3
- 0.6.4
- 0.6.5
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.8.0
- 0.8.1
- 0.8.10
- 0.8.11
- 0.8.12
- 0.8.13
- 0.8.14
- 0.8.15
- 0.8.2
- 0.8.3
- 0.8.4
- 0.8.4-2
- 0.8.4-3
- 0.8.5
- 0.8.6
- 0.8.7
- 0.8.8
- 0.8.9
- 0.9.0
- 0.9.1
- 0.9.2
- 0.9.3
- 0.9.3-2
- 0.9.3-3
- 0.9.4
- 0.9.4-2
- 0.9.5
- 0.9.6
- 17.10.1
- 17.5.1
- 17.6.1
- 17.6.2
- 17.7.1
- 17.8.1
- 17.9.1
- 17.9.2
- 17.9.3
- 18.10.1
- 18.11.1
- 18.11.2
- 18.12.1
- 18.3.1
- 18.4.1
- 18.5.1
- 18.5.2
- 18.6.1
- 18.7.1
- 18.8.1
- 18.8.2
- 18.9.1
- 18.9.2
- 19.1.1
- 19.10.1
- 19.11.1
- 19.11.2
- 19.2.1
- 19.3.1
- 19.3.2
- 19.3.3
- 19.5.1
- 19.6.1
- 19.6.2
- 19.7.1
- 19.7.2
- 19.8.1
- 19.9.1
- 19.9.2
- 19.9.3
- 20.1.2
- 20.1.3
- 20.12.1
- 20.12.2
- 20.2.1
- 20.2.2
- 20.3.1
- 20.4.1
- 20.4.2
- 20.4.3
- 20.6.1
- 20.6.2
- 20.7.1
- Affected ranges
- ECOSYSTEM: < 20.12.3
Update to 20.12.3
autobahn PyPI
- Versions
- 0.3.1
- 0.3.2
- 0.4.0
- 0.4.1
- 0.4.2
- 0.4.3
- 0.4.10
- 0.5.0
- 0.5.1
- 0.5.2
- 0.5.5
- 0.5.8
- 0.5.9
- 0.5.14
- 0.6.3
- 0.6.4
- 0.6.5
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.7.4
- 0.8.0
- 0.8.1
- 0.8.2
- 0.8.3
- 0.8.4
- 0.8.4-2
- 0.8.4-3
- 0.8.5
- 0.8.6
- 0.8.7
- 0.8.8
- 0.8.9
- 0.8.10
- 0.8.11
- 0.8.12
- 0.8.13
- 0.8.14
- 0.8.15
- 0.9.0
- 0.9.1
- 0.9.2
- 0.9.3
- 0.9.3-2
- 0.9.3-3
- 0.9.4
- 0.9.4-2
- 0.9.5
- 0.9.6
- 0.10.0
- 0.10.1
- 0.10.2
- 0.10.3
- 0.10.4
- 0.10.5
- 0.10.5.post2
- 0.10.6
- 0.10.7
- 0.10.8
- 0.10.9
- 0.11.0
- 0.12.0
- 0.12.1
- 0.13.0
- 0.13.1
- 0.14.0
- 0.14.1
- 0.15.0
- 0.16.0
- 0.16.1
- 0.17.0
- 0.17.1
- 0.17.2
- 0.18.0
- 0.18.1
- 0.18.2
- 17.5.1
- 17.6.1
- 17.6.2
- 17.7.1
- 17.8.1
- 17.9.1
- 17.9.2
- 17.9.3
- 17.10.1
- 18.3.1
- 18.4.1
- 18.5.1
- 18.5.2
- 18.6.1
- 18.7.1
- 18.8.1
- 18.8.2
- 18.9.1
- 18.9.2
- 18.10.1
- 18.11.1
- 18.11.2
- 18.12.1
- 19.1.1
- 19.2.1
- 19.3.1
- 19.3.2
- 19.3.3
- 19.5.1
- 19.6.1
- 19.6.2
- 19.7.1
- 19.7.2
- 19.8.1
- 19.9.1
- 19.9.2
- 19.9.3
- 19.10.1
- 19.11.1
- 19.11.2
- 20.1.2
- 20.1.3
- 20.2.1
- 20.2.2
- 20.3.1
- 20.4.1
- 20.4.2
- 20.4.3
- 20.6.1
- 20.6.2
- 20.7.1
- 20.12.1
- 20.12.2
- Affected ranges
- ECOSYSTEM: < 20.12.3
Update to 20.12.3
python-autobahn Ubuntu:16.04:LTS
- Versions
- 0.10.3+dfsg1-2
- 0.10.3+dfsg1-3
- 0.10.3+dfsg1-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python-autobahn Ubuntu:18.04:LTS
- Versions
- 0.14.1+dfsg1-2ubuntu1
- 17.10.1+dfsg1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python-autobahn Ubuntu:20.04:LTS
- Versions
- 17.10.1+dfsg1-5
- 17.10.1+dfsg1-6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python-autobahn Ubuntu:22.04:LTS
- Versions
- 17.10.1+dfsg1-7
- 21.11.1+dfsg1-2
- 21.11.1+dfsg1-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python-autobahn Ubuntu:24.04:LTS
- Versions
- 22.7.1+dfsg1-3
- 22.7.1+dfsg1-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python-autobahn Ubuntu:25.10
- Versions
- 23.1.2+dfsg1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python-autobahn Ubuntu:26.10
- Versions
- 24.4.2+dfsg1-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python-autobahn Ubuntu:26.04:LTS
- Versions
- 23.1.2+dfsg1-2
- 24.4.2+dfsg1-4
- 24.4.2+dfsg1-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/crossbario/autobahn-python
- https://github.com/crossbario/autobahn-python/compare/v20.12.2...v20.12.3
- https://pypi.org/project/autobahn/20.12.3/
- https://autobahn.readthedocs.io/en/latest/changelog.html
- https://github.com/crossbario/autobahn-python/pull/1439
- https://nvd.nist.gov/vuln/detail/CVE-2020-35678