PyPI/django CVE-2008-2302: medium 6.1, EPSS 1.32%
Django Cross-site scripting (XSS) vulnerability
Action: Upgrade django to 0.91.2 or later.
pip install django==0.91.2pip install django==0.95.3pip install django==0.96.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.91 | 0.91.2 | - |
| 0.95 | 0.95.3 | - |
| 0.96 | 0.96.2 | - |
Fixed versions
| 0.91.2 | 0.95.3 | 0.96.2 |
Sources
- osv: GHSA-54qj-48vx-cr9f
- https://nvd.nist.gov/vuln/detail/CVE-2008-2302
- https://github.com/django/django/commit/50ce7fb57d79e8940ccf6e2781f2f01df029b5c5
- https://github.com/django/django/commit/6e657e2c404a96e744748209e896d8a69c15fdf2
- https://github.com/django/django/commit/7791e5c050cebf86d868c5dab7092185b125fdc9
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42396
- https://github.com/django/django
- https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2008-1.yaml
- https://web.archive.org/web/20080725022008/http://secunia.com/advisories/30291
- https://web.archive.org/web/20081012011038/http://secunia.com/advisories/30250
- https://web.archive.org/web/20170222015451/http://securitytracker.com/id?1020028
- https://web.archive.org/web/20200228153339/http://www.securityfocus.com/bid/29209
- http://www.djangoproject.com/weblog/2008/may/14/security
CVE-2008-2302 · published · modified · JSON