description: Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
problem types: Open redirect
affected:
{
vendor: tornadoweb
product: Tornado
versions:
version: versions 6.3.1 and earlier, status: affected
}