Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL.
CVSS Information
N/A
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
allauth-django 输入验证错误漏洞
Vulnerability Description
allauth-django是allauth开源的一个身份验证应用。 allauth-django 65.14.1之前版本存在输入验证错误漏洞，该漏洞源于启用SAML IdP发起的SSO时存在开放重定向问题，可能导致攻击者通过特制URL将用户重定向到任意外部网站。
CVSS Information
N/A
Vulnerability Type
N/A