Description
Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jhpyle | docassemble | < 1.4.97 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | docassemble-webapp | < 1.4.97 | 1.4.97 | GHSA-7wxf-r2qv-9xwr |