Medium ELSA-2023-6523 1 CVE

Moderate: python-tornado security update (Oracle Linux 9)

Published Nov 11, 2023 · Updated Nov 11, 2023

Ecosystem: Oracle Linux

Summary

[6.1.0-9]
- Fix an open redirect in StaticFileHandler
Resolves: CVE-2023-28370

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	python3-tornado	0:6.1.0-9.el9

Vulnerabilities 1

Medium 6.1

CVE-2023-28370

Open redirect in Tornado

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

tornadoweb tornado salt python-tornado Debian Ubuntu Azure Linux PyPI

May 25, 2023