tocsin

PyPI/django CVE-2017-7233: medium 6.1, EPSS 2.40%

Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

Action: Upgrade django to 1.8.18 or later.

pip install django==1.10.7
pip install django==1.9.13
pip install django==1.8.18

Affected

introducedfixedlast affected
1.10a11.10.7-
1.9a11.9.13-
1.8a11.8.18-

Fixed versions

1.10.71.9.131.8.18

Sources

CVE-2017-7233 · published · modified · JSON