https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:21:38.701390+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-23435 CVE-2021-23435 — Open Redirect 2026-10-08T11:21:38.717297+00:00

Affected: clearance

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session[:return_to]. If the value used for return_to contains multiple leading slashes (/////example.com) the user ends up being redirected to the external domain that comes after the slashes (http://example.com).