djangoproject django 1.10.5 vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

In Django 1.10.x prior to 1.10.8 and 1.11.x prior to 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affect most prod...

Djangoproject Django 1.10.1 Djangoproject Django 1.10.2 Djangoproject Django 1.11.0 Djangoproject Django 1.11.1 Djangoproject Django 1.10.3 Djangoproject Django 1.10.4 Djangoproject Django 1.11.4 Djangoproject Django 1.10.0 Djangoproject Django 1.10.7 Djangoproject Django 1.11.2 Djangoproject Django 1.11.3 Djangoproject Django 1.10.5 Djangoproject Django 1.10.6

6.1

CVSSv3

A maliciously crafted URL to a Django (1.10 prior to 1.10.7, 1.9 prior to 1.9.13, and 1.8 prior to 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability.

3 Github repositories

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook