Description
Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.
Published: 2024-02-29
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-0565 Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.
Github GHSA Github GHSA GHSA-7wxf-r2qv-9xwr Docassemble open redirect
History

Tue, 02 Sep 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Jhpyle
Jhpyle docassemble
CPEs cpe:2.3:a:jhpyle:docassemble:*:*:*:*:*:*:*:*
Vendors & Products Jhpyle
Jhpyle docassemble

Subscriptions

Jhpyle Docassemble
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2024-08-05T17:12:17.718Z

Reserved: 2024-02-22T18:08:38.874Z

Link: CVE-2024-27291

cve-icon Vulnrichment

Updated: 2024-08-02T00:27:59.899Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-21T02:52:19.343

Modified: 2026-06-17T07:19:35.240

Link: CVE-2024-27291

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-601

    URL Redirection to Untrusted Site ('Open Redirect')