-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability is an open redirect caused by improper URL validation. The commit diff shows critical changes to the make_safe_url function in server.py, where the patched version adds: 1) A list of allowed endpoint checks, 2) Path normalization to prevent relative paths, and 3) Strict slash prefix requirements. These changes directly address open redirect vulnerabilities by ensuring user-supplied URLs can't be crafted to point to external domains.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| docassemble.webapp | pip | < 1.4.97 | 1.4.97 |
A Semantic Attack on Google Gemini - Read the Latest Research