CVE-2023-28370
Published: 25 May 2023
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
Notes
Author | Note |
---|---|
rodrigo-zaiden | until salt version v3006.1, tornado source was included as vendored code. |
Priority
Status
Package | Release | Status |
---|---|---|
python-tornado Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
focal |
Needs triage
|
|
jammy |
Needs triage
|
|
kinetic |
Needs triage
|
|
lunar |
Needs triage
|
|
trusty |
Ignored
(out of standard support)
|
|
upstream |
Released
(6.3.2)
|
|
xenial |
Needs triage
|
|
salt Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
focal |
Does not exist
|
|
jammy |
Needs triage
|
|
kinetic |
Needs triage
|
|
lunar |
Does not exist
|
|
trusty |
Needs triage
|
|
upstream |
Needs triage
|
|
xenial |
Needs triage
|