CVE-2020-28724
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.
- Update to 0.10.4+dfsg1-1ubuntu1.2
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for python-werkzeug in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.
Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.
Check your installed stack and versions against the current vulnerability feeds.