python-fedora Open Redirection and Cross Site Scripting Vulnerabilities

Bugtraq ID:	67583
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 20 2014 12:00AM
Updated:	May 07 2015 05:12PM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

python-fedora Open Redirection and Cross Site Scripting Vulnerabilities

python-fedora is prone to multiple open-redirection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

Attackers can exploit these issues to execute arbitrary script or HTML code, steal cookie-based authentication credentials, and may redirect a user to a potentially malicious site; this may aid in phishing attacks. Other attacks may also be possible.

python-fedora Open Redirection and Cross Site Scripting Vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting victim into following a malicious URI.

python-fedora Open Redirection and Cross Site Scripting Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

python-fedora Open Redirection and Cross Site Scripting Vulnerabilities

References:

• Fedora Python Modules (Red Hat)