← Back

Vonautomatisch

vonautomatisch

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Django Grappelli
django_grappelli
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-46898
1Vonautomatisch
1Django Grappelli
Jun 17, 2026
Oct 22, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith("/") but this does not consider a protocol-relative URL (e.g., //example.com) attack.