https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:07:25 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:6523 <p><strong>Affected:</strong> AlmaLinux:9: python3-tornado</p> <p>Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools.</p> <p>Security Fix(es):</p> <p>* python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations (CVE-2023-28370)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: python3-tornado</p> <p>Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools.</p> <p>Security Fix(es):</p> <p>* python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations (CVE-2023-28370)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:6523 https://cve.radiocsirt.org/vuln/bdu:2025-00947 bdu:2025-00947 https://cve.radiocsirt.org/vuln/bdu:2025-00947 https://cve.radiocsirt.org/vuln/brew-jupyterlab-cve-2023-28370 <p><strong>Affected:</strong> Homebrew: jupyterlab</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> <p><strong>Affected:</strong> Homebrew: jupyterlab</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> https://cve.radiocsirt.org/vuln/brew-jupyterlab-cve-2023-28370 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0486 certfr-2025-avi-0486 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0486 https://cve.radiocsirt.org/vuln/euvd-2026-258390 EUVD-2026-258390 https://cve.radiocsirt.org/vuln/euvd-2026-258390 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28370 <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28370 https://cve.radiocsirt.org/vuln/ghsa-hj3f-6gcp-jg8j <p><strong>Affected:</strong> PyPI: tornado</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> <p><strong>Affected:</strong> PyPI: tornado</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> https://cve.radiocsirt.org/vuln/ghsa-hj3f-6gcp-jg8j https://cve.radiocsirt.org/vuln/gsd-2023-28370 gsd-2023-28370 https://cve.radiocsirt.org/vuln/gsd-2023-28370 https://cve.radiocsirt.org/vuln/jvndb-2023-000053 <p>Tornado provided by tornadoweb contains a vulnerability that triggers open redirect (CWE-601) under certain non-default configurations. Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Tornado provided by tornadoweb contains a vulnerability that triggers open redirect (CWE-601) under certain non-default configurations. Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2023-000053 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28370 msrc_CVE-2023-28370 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28370 https://cve.radiocsirt.org/vuln/oesa-2023-1370 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-tornado, openEuler:20.03-LTS-SP3: python-tornado, openEuler:22.03-LTS: python-tornado, openEuler:22.03-LTS-SP1: python-tornado</p> <p>Tornado is an open source version of the scalable, non-blocking web server and tools.</p> <p>Security Fix(es):</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.(CVE-2023-28370)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-tornado, openEuler:20.03-LTS-SP3: python-tornado, openEuler:22.03-LTS: python-tornado, openEuler:22.03-LTS-SP1: python-tornado</p> <p>Tornado is an open source version of the scalable, non-blocking web server and tools.</p> <p>Security Fix(es):</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.(CVE-2023-28370)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1370 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13107-1 <p>python310-tornado6-6.3.2-2.1 on GA media</p> <p>python310-tornado6-6.3.2-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13107-1 https://cve.radiocsirt.org/vuln/pysec-2023-75 <p><strong>Affected:</strong> PyPI: tornado</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> <p><strong>Affected:</strong> PyPI: tornado</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> https://cve.radiocsirt.org/vuln/pysec-2023-75 https://cve.radiocsirt.org/vuln/suse-el-9-client-tools-2023-3137 <p>Security update for SUSE Manager Salt Bundle</p> <p>Security update for SUSE Manager Salt Bundle</p> https://cve.radiocsirt.org/vuln/suse-el-9-client-tools-2023-3137 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28370 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: python-tornado, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: python-tornado, Ubuntu:Pro:18.04:LTS: salt, Ubuntu:Pro:20.04:LTS: python-tornado, Ubuntu:22.04:LTS: salt, Ubuntu:Pro:22.04:LTS: python-tornado</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: python-tornado, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: python-tornado, Ubuntu:Pro:18.04:LTS: salt, Ubuntu:Pro:20.04:LTS: python-tornado, Ubuntu:22.04:LTS: salt, Ubuntu:Pro:22.04:LTS: python-tornado</p> <p>Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28370 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2853 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2853