Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-tornado | Nov 16, 2023 | May 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-tornadoUpgrade python3-tornado-debuginfoUpgrade python-tornado-debuginfoUpgrade python3-tornado-docUpgrade python3-tornadoUpgrade python-tornado-doc | Jul 21, 2023 | May 25, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-tornado-debuginfoUpgrade python-tornado-docUpgrade python-tornado-debugsourceUpgrade python3-tornado | Feb 17, 2025 | May 25, 2023 |
| Centos_linux | — | Upgrade python-tornado-debugsourceUpgrade python3-tornado-debuginfoUpgrade python3-tornado | Nov 8, 2023 | May 25, 2023 |
| Debian | — | Upgrade python-tornado | Jan 3, 2025 | May 25, 2023 |
| Oracle_linux | — | Upgrade python3-tornado | Nov 16, 2023 | May 25, 2023 |
| Redhat_linux | — | Upgrade python-tornado-debugsourceUpgrade python3-tornado-debuginfoUpgrade python3-tornadoNo solution exists | Nov 8, 2023 | May 25, 2023 |
| Suse | — | Upgrade salt-transactional-updateUpgrade python3-tornadoUpgrade python3-saltUpgrade salt-standalone-formulas-configurationUpgrade salt-docUpgrade salt-syndicUpgrade salt-fish-completionUpgrade system-user-prometheusUpgrade salt-zsh-completionUpgrade python2-tornadoUpgrade salt-masterUpgrade salt-bash-completionUpgrade python-tornadoUpgrade saltUpgrade salt-cloudUpgrade salt-sshUpgrade salt-proxyUpgrade salt-apiUpgrade prometheus-blackbox_exporterUpgrade salt-testsUpgrade salt-minionUpgrade spacecmd | Aug 3, 2023 | May 25, 2023 |
| Ubuntu | — | Upgrade python3-tornado (Ubuntu Pro)Upgrade python-tornado (Ubuntu Pro)Upgrade python3-tornado | Jun 14, 2023 | May 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub