CVE-2023-28370
Published: 25 May 2023
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
Notes
| Author | Note |
|---|---|
| rodrigo-zaiden | until salt version v3006.1, tornado source was included as vendored code. |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
python-tornado Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
| focal |
Needs triage
|
|
| jammy |
Needs triage
|
|
| kinetic |
Needs triage
|
|
| lunar |
Needs triage
|
|
| trusty |
Ignored
(out of standard support)
|
|
| upstream |
Released
(6.3.2)
|
|
| xenial |
Needs triage
|
|
|
salt Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
| focal |
Does not exist
|
|
| jammy |
Needs triage
|
|
| kinetic |
Needs triage
|
|
| lunar |
Does not exist
|
|
| trusty |
Needs triage
|
|
| upstream |
Needs triage
|
|
| xenial |
Needs triage
|