CVE-2024-58389Published
HoloViz Panel from 1.2.2 before 1.9.0 Open Redirect via next Parameter
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2024-58389 · Microsoft / collected KEV context
cve-program · CVE-2024-58389
- https://github.com/holoviz/panel/issues/6782
- https://github.com/holoviz/panel/commit/a6a8b2cb9592a014cf6a7b0d3d5fc9cbf59bb2ed
- https://github.com/holoviz/panel/blob/v1.8.10/panel/auth.py#L866-L900
- https://github.com/holoviz/panel
- https://www.vulncheck.com/advisories/holoviz-panel-from-1.2.2-before-1.9.0-open-redirect-via-next-parameter
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.