Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-tornado | Nov 16, 2023 | May 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python3-tornado-debuginfoUpgrade python-tornadoUpgrade python-tornado-docUpgrade python-tornado-debuginfoUpgrade python3-tornado-docUpgrade python3-tornado | Jul 21, 2023 | May 25, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-tornado-debuginfoUpgrade python-tornado-docUpgrade python-tornado-debugsourceUpgrade python3-tornado | Feb 17, 2025 | May 25, 2023 |
| Centos_linux | — | Upgrade python-tornado-debugsourceUpgrade python3-tornadoUpgrade python3-tornado-debuginfo | Nov 8, 2023 | May 25, 2023 |
| Debian | — | Upgrade python-tornado | Jan 3, 2025 | May 25, 2023 |
| Oracle_linux | — | Upgrade python3-tornado | Nov 16, 2023 | May 25, 2023 |
| Redhat_linux | — | No solution existsUpgrade python3-tornadoUpgrade python-tornado-debugsourceUpgrade python3-tornado-debuginfo | Nov 8, 2023 | May 25, 2023 |
| Suse | — | Upgrade prometheus-blackbox_exporterUpgrade salt-masterUpgrade salt-apiUpgrade python-tornadoUpgrade salt-bash-completionUpgrade salt-sshUpgrade saltUpgrade salt-proxyUpgrade salt-minionUpgrade salt-cloudUpgrade salt-testsUpgrade spacecmdUpgrade system-user-prometheusUpgrade salt-transactional-updateUpgrade python3-tornadoUpgrade python3-saltUpgrade salt-fish-completionUpgrade salt-zsh-completionUpgrade python2-tornadoUpgrade salt-standalone-formulas-configurationUpgrade salt-syndicUpgrade salt-doc | Aug 3, 2023 | May 25, 2023 |
| Ubuntu | — | Upgrade python3-tornadoUpgrade python-tornado (Ubuntu Pro)Upgrade python3-tornado (Ubuntu Pro) | Jun 14, 2023 | May 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub