All errata/sisyphus_riscv64/ALT-PU-2023-3570-1
ALT-PU-2023-3570-1

Package update python3-module-tornado in branch sisyphus_riscv64

Version6.3.2-alt1
Task#0
Published2023-05-17
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2023-28370
MEDIUM6.1

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

Published: 2023-05-25Modified: 2025-11-03
CVSS 3.xMEDIUM 6.1
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N