VUL-0: CVE-2024-42353: python-WebOb: WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Pytho ...
StevenK
moderate
security
Security update for python-WebOb
This update for python-WebOb fixes the following issues:
- CVE-2024-42353: Fixed open redirect if the Location header is not a full URI (bsc#1229221).
python-WebOb