CVE-2018-14574

Synopsis Moderate: Red Hat Gluster Storage Web Administration security update Type/Severity Security Advisory: Moderate Topic Updated packages are now available for Red Hat Gluster Storage 34 Web Administration Batch Update 3 on Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as h ...

Django could be used as an open redirect ...

Debian Bug report logs - #874415 python-django: CVE-2017-12794: Possible XSS in traceback section of technical 500 debug page Package: src:python-django; Maintainer for src:python-django is Debian Python Modules Team <python-modules-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> D ...

Debian Bug report logs - #905216 python-django: CVE-2018-14574: Open redirect possibility in CommonMiddleware Package: src:python-django; Maintainer for src:python-django is Debian Python Modules Team <python-modules-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 1 Aug ...

Debian Bug report logs - #918230 python-django: CVE-2019-3498: Content spoofing possibility in the default 404 page Package: src:python-django; Maintainer for src:python-django is Debian Python Modules Team <python-modules-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, ...

When using the djangomiddlewarecommonCommonMiddleware class with the APPEND_SLASH setting enabled, Django projects which accept paths ending in a slash may be vulnerable to an unvalidated HTTP redirect ...

If the djangomiddlewarecommonCommonMiddleware and the APPEND_SLASH setting are both enabled, and if the project has a URL pattern that accepts any path ending in a slash (many content management systems have such a pattern), then a request to a maliciously crafted URL of that site could lead to a redirect to another site, enabling phishing and o ...