OMERO.web 输入验证错误漏洞

漏洞信息详情

OMERO.web是Open Microscopy Environment团队的一款用于从Web浏览器查看OMERO服务器上图像的客户端程序。

OMERO.web 存在安全漏洞，该漏洞允许重定向到不受信任的站点。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c

来源:MISC

链接:https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c

来源:MISC

链接:https://pypi.org/project/omero-web/

来源:MISC

链接:https://www.openmicroscopy.org/security/advisories/2021-SV2/

来源:CONFIRM

链接:https://github.com/ome/omero-web/security/advisories/GHSA-g4rf-pc26-6hmr

来源:MISC

链接:https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-21377

暂无