Red Hat Security Advisory

RHSA-2023:6523

python-tornado security update

Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python-tornado-6.1.0-9.el9, python3-tornado-6.1.0-9.el9

Fixes 1 record

TI-2023-12916 CVE-2023-28370 · GHSA-hj3f-6gcp-jg8j

Open redirect in tornadoweb Tornado

LOW 30

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially craft…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01142 Published 2023-05-25 Partial fix · 6.3.2 CWE-601