Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-python3-tornado | Nov 16, 2023 | May 25, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-python-tornadoamazon-linux-ami-2-upgrade-python-tornado-debuginfoamazon-linux-ami-2-upgrade-python-tornado-docamazon-linux-ami-2-upgrade-python3-tornadoamazon-linux-ami-2-upgrade-python3-tornado-debuginfoamazon-linux-ami-2-upgrade-python3-tornado-doc | Jul 21, 2023 | May 25, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-python3-tornadoamazon-linux-2023-upgrade-python3-tornado-debuginfoamazon-linux-2023-upgrade-python-tornado-debugsourceamazon-linux-2023-upgrade-python-tornado-doc | Feb 17, 2025 | May 25, 2023 | |
| Centos_linux | — | centos-upgrade-python-tornado-debugsourcecentos-upgrade-python3-tornadocentos-upgrade-python3-tornado-debuginfo | Nov 8, 2023 | May 25, 2023 |
| Debian | debian-upgrade-python-tornado | Jan 3, 2025 | May 25, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-python3-tornado | Nov 16, 2023 | May 25, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-python-tornado-debugsourceredhat-upgrade-python3-tornadoredhat-upgrade-python3-tornado-debuginfo | Nov 8, 2023 | May 25, 2023 | |
| Suse | — | suse-upgrade-prometheus-blackbox_exportersuse-upgrade-python-tornadosuse-upgrade-python2-tornadosuse-upgrade-python3-saltsuse-upgrade-python3-tornadosuse-upgrade-saltsuse-upgrade-salt-apisuse-upgrade-salt-bash-completionsuse-upgrade-salt-cloudsuse-upgrade-salt-docsuse-upgrade-salt-fish-completionsuse-upgrade-salt-mastersuse-upgrade-salt-minionsuse-upgrade-salt-proxysuse-upgrade-salt-sshsuse-upgrade-salt-standalone-formulas-configurationsuse-upgrade-salt-syndicsuse-upgrade-salt-testssuse-upgrade-salt-transactional-updatesuse-upgrade-salt-zsh-completionsuse-upgrade-spacecmdsuse-upgrade-system-user-prometheus | Aug 3, 2023 | May 25, 2023 |
| Ubuntu | ubuntu-pro-upgrade-python-tornadoubuntu-pro-upgrade-python3-tornadoubuntu-upgrade-python3-tornado | Jun 14, 2023 | May 25, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub