CVE-2022-4589 – cyface Terms and Conditions Module views.py returnTo redirect

https://notcve.org/view.php?id=CVE-2022-4589

A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 2.0.10 is able to address this issue. • https://github.com/cyface/django-termsandconditions/commit/03396a1c2e0af95e12a45c5faef7e47a4b513e1a https://github.com/cyface/django-termsandconditions/pull/239 https://github.com/cyface/django-termsandconditions/releases/tag/v2.0.10 https://vuldb.com/?id.216175 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •