CVE-2016-1000001

CVE-2016-1000001 describes an open redirect vulnerability in flask-oidc version 0.1.2 and earlier. This high-severity flaw (CVSS 7.4) allows an unauthenticated attacker to redirect users to arbitrary malicious sites through a low-complexity network attack requiring user interaction, potentially leading to phishing or credential theft. While the vulnerability has a high impact on integrity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.