CVE-2024-27291

Published March 21st, 2024

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.

jhpyle/docassemble

A free, open-source expert system for guided interviews and document assembly, based on Python, YAML, and Markdown.

GitHub

955