Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

djangoproject django 1.2-alpha1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-3442
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django prior to 1.3.2 and 1.4.x prior to 1.4.1 do not validate the scheme of a redirect target, which might allow remote malicious users to conduct cross-site scripting (XSS) att...
Djangoproject Django 1.2Djangoproject Django 1.2-alpha1Djangoproject Django 1.1Djangoproject Django 1.0Djangoproject Django 1.3Djangoproject Django 1.2.2Djangoproject Django 0.95Djangoproject Django 1.4Djangoproject Django 1.2.7Djangoproject Django 1.2.6Djangoproject Django 1.1.4Djangoproject Django 1.0.2Djangoproject DjangoDjangoproject Django 1.2.5Djangoproject Django 1.2.4Djangoproject Django 1.1.3Djangoproject Django 1.1.2Djangoproject Django 1.0.1Djangoproject Django 0.96
NA
CVE-2012-3443
The django.forms.ImageField class in the form system in Django prior to 1.3.2 and 1.4.x prior to 1.4.1 completely decompresses image data during image validation, which allows remote malicious users to cause a denial of service (memory consumption) by uploading an image file.
Djangoproject DjangoDjangoproject Django 1.3Djangoproject Django 1.2.6Djangoproject Django 1.2.5Djangoproject Django 1.1.4Djangoproject Django 1.1.3Djangoproject Django 1.0.1Djangoproject Django 0.96Djangoproject Django 1.2Djangoproject Django 1.2.7Djangoproject Django 1.1Djangoproject Django 1.0Djangoproject Django 1.0.2Djangoproject Django 1.2.4Djangoproject Django 1.2.2Djangoproject Django 1.1.2Djangoproject Django 0.95Djangoproject Django 1.4Djangoproject Django 1.2-alpha1
NA
CVE-2012-3444
The get_image_dimensions function in the image-handling functionality in Django prior to 1.3.2 and 1.4.x prior to 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote malicious users to cause a denial of service (process or thread consumpt...
Djangoproject Django 1.2Djangoproject Django 1.2.2Djangoproject Django 1.1Djangoproject Django 1.0Djangoproject Django 1.4Djangoproject Django 1.3Djangoproject Django 1.2.5Djangoproject Django 1.2.4Djangoproject Django 1.1.2Djangoproject Django 0.96Djangoproject Django 0.95Djangoproject Django 1.2-alpha1Djangoproject DjangoDjangoproject Django 1.2.7Djangoproject Django 1.2.6Djangoproject Django 1.1.4Djangoproject Django 1.1.3Djangoproject Django 1.0.2Djangoproject Django 1.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3201CVE-2024-4779CVE-2024-35090CVE-2024-5084hard-codedCVE-2024-4985HTML injectionCVE-2024-33655local file inclusion
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook