OMERO webclient does not validate URL redirects on login or switching group.

Description

References

• ome/omero-web security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2021-21377 · ADVISORY
• ome/omero-web commit 952f8e5 · WEB
• ome/omero-web · PACKAGE
• ome/omero-web · WEB
• pypa/advisory-database · WEB
• pypi.org/project/omero-web · WEB
• openmicroscopy.org/security/advisories/2021-SV2 · WEB
• pypi.org/project/omero-web · Third Party Advisory
• openmicroscopy.org/security/advisories/2021-SV2 · Vendor Advisory

omero-web의 다른 취약점

• GHSA-j4gv-6x9v-v23g낮음OMERO.web uses jquery-form library, which may be vulnerable to XSS attack
• CVE-2025-54791보통 5.3OMERO.web provides a web based client and plugin infrastructure. Prior to version 5.29.2, if an error occurred when resetting a user's passw…
• CVE-2024-35180보통 6.1OMERO.web provides a web based client and plugin infrastructure. There is currently no escaping or validation of the `callback` parameter th…
• CVE-2021-41132보통 6.1OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper s…
• CVE-2021-21376보통 6.5OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information abo…