CVE-2017-1002150

python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection

Score

CVSS 3.0 6.1 Medium

Status

Modified - patrick@puiterwijk.org

Published

2017-09-14

Last modified

2024-08-05

Weaknesses

CWE-601

Affected products

• Python-fedora (Fedora Project Infrastructure)
• Python-fedora (Fedoraproject)

References

• https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929
• https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch