CVE-2019-13175

Medium

Description

Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instances of Read the Docs (in addition to the public readthedocs.org web sites).

SeverityMedium
CVSS6.1
Exploit probability—
ProductReadthedocs Read The Docs
PublishedJul 2, 2019
First seenJul 2, 2019

How to fix

Update
  • readthedocs read_the_docs3.5.1 or later

Affected products

ProductAffected versionsFixed in
readthedocs read_the_docsv < 3.5.13.5.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.