Security Advisory

CVE-2023-49438

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-26 00:00:00
Last updated 2025-11-04 18:19:40
Assigner mitre
State PUBLISHED

Description

An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes.