Werkzeug
by Werkzeug
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-49767 | Hig | 0.42 | 7.5 | 0.01 | Oct 25, 2024 | Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werkzeug prior to 3.0.6 to parse `multipart/form-data` requests (e.g. all flask applications) are vulnerable to a relatively… | ||
| CVE-2020-28724 | Med | 0.40 | 6.1 | 0.02 | Nov 18, 2020 | Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL. |
- risk 0.42cvss 7.5epss 0.01
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werkzeug prior to 3.0.6 to parse `multipart/form-data` requests (e.g. all flask applications) are vulnerable to a relatively…
- risk 0.40cvss 6.1epss 0.02
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.