Open redirect in Flask-Security - CVE-2021-23385

Vulnerability identifier: #VU53615

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-23385

CWE-ID: CWE-601

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to redirect victims to arbitrary URL.

The vulnerability exists due to improper sanitization of user-supplied data. A remote attacker can create a link that leads to a trusted website, however, when clicked, redirects the victim to arbitrary domain.

Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.

Flask-Security
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Storage
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
openSUSE Leap
Ubuntu
python3-flask-security (Ubuntu package)
python3-Flask-Security
python2-Flask-Security
python3-Flask-Security-Too

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

python3-flask-security (Ubuntu package) - addressed in versions Ubuntu Pro, 1.7.5-2ubuntu0.20.04.1, 4.0.0-1ubuntu0.1
python3-Flask-Security - update to 3.0.0-150100.4.3.1
python2-Flask-Security - update to 3.0.0-150100.4.3.1
python3-Flask-Security-Too - update to 3.4.2-150200.3.6.1

• https://snyk.io/vuln/SNYK-PYTHON-FLASKSECURITY-1293234

• Open redirect in Flask-Security
• SUSE update for python-Flask-Security
• SUSE update for python-Flask-Security-Too
• Ubuntu update for flask-security