CVE-2026-49853 | tornadoweb Tornado up to 6.5.5 Redirect redirect (Nessus ID 345570)

A vulnerability labeled as problematic has been found in tornadoweb Tornado up to 6.5.5. Impacted is an unknown function of the component Redirect. The manipulation of the argument Authorization/auth_username/auth_password/auth_mode results in open redirect. This vulnerability is reported as CVE-2026-49853. The attack can be launched remotely. No... Weiterlesen