Tornado: Open redirect in RedirectHandler via protocol-relative URLs

影響: pip:tornado < 6.6 → 6.6

tornado.web.RedirectHandler builds its target URL by substituting parts of the request path into a template. Depending on where those substitutions appear in the template, an attacker can craft a request that redirects to a host of their choosing. This creates an open redirect on the application's domain, which can be used in phishing. Impact Applications are affected if they use RedirectHandler with a URL template where a regex capture group can influence the scheme or host of the redirect. Th…

在 GitHub Advisory Database 阅读

2026/10/29 07:43，GitHub Advisory Database 发布了“Tornado: Open redirect in RedirectHandler via protocol-relative URLs”（类型：漏洞公告）。严重程度为“低危”（low）。相关技术：Python。CVE：CVE-2026-116578。