Tornado: Open redirect in RedirectHandler via protocol-relative URLs
影響: pip:tornado < 6.6 → 6.6
tornado.web.RedirectHandler builds its target URL by substituting parts of the request path into a template. Depending on where those substitutions appear in the template, an attacker can craft a request that redirects to a host of their choosing. This creates an open redirect on the application's domain, which can be used in phishing. Impact Applications are affected if they use RedirectHandler with a URL template where a regex capture group can influence the scheme or host of the redirect. Th…
X에서 속보 받기악용·대형 유출·장애를 대응 방법과 함께.
팔로우 @vulnpulse_app| CVE | CVE-2026-116578 |
|---|---|
| 정보원 | GitHub Advisory Database |
| 수집 시각 | 2026. 10. 29. 오전 09:48 |
| 데이터 | Markdown JSON |
2026. 10. 29. 오전 07:43, GitHub Advisory Database에서 "Tornado: Open redirect in RedirectHandler via protocol-relative URLs"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "낮음"(low)입니다. 관련 기술: Python. CVE: CVE-2026-116578.