Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tornado 输入验证错误漏洞
Vulnerability Description
Tornado是中国龙卷风科技（Tornado）社区的一个Python Web框架和异步网络库。该库通过使用非阻塞网络I / O，可以扩展到成千上万的开放连接，使其非常适合 长时间轮询， WebSocket和其他需要与每个用户建立长期连接的应用程序。 Tornado 6.3.1及之前版本存在安全漏洞，该漏洞源于存在开放重定向漏洞，当访问特制URL时，使用受影响产品的网站用户可能会被重定向到任意网站。
CVSS Information
N/A
Vulnerability Type
N/A