Vulnerability Database
290,476
Total vulnerabilities in the database
CVE-2023-28370
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
| Software | From | Fixed in |
|---|---|---|
tornado
|
- | 6.3.2 |
| tornadoweb / tornado | - | 6.3.2 |