Tornado: Open redirect in RedirectHandler via protocol-relative URLs

影響: pip:tornado < 6.6 → 6.6

tornado.web.RedirectHandler builds its target URL by substituting parts of the request path into a template. Depending on where those substitutions appear in the template, an attacker can craft a request that redirects to a host of their choosing. This creates an open redirect on the application's domain, which can be used in phishing. Impact Applications are affected if they use RedirectHandler with a URL template where a regex capture group can influence the scheme or host of the redirect. Th…

GitHub Advisory Databaseで読む

2026/10/29 07:43、GitHub Advisory Databaseが「Tornado: Open redirect in RedirectHandler via protocol-relative URLs」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「注意」(low) です。関連する技術: Python。CVE: CVE-2026-116578。