tocsin

PyPI/django CVE-2017-7233: medium 6.1, EPSS 2.40%

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``dja

Action: Upgrade django to 1.8.18 or later.

pip install django==1.10.7
pip install django==1.9.13
pip install django==1.8.18

Affected

introducedfixedlast affected
1.81.8.18-
1.91.9.13-
1.101.10.7-

Fixed versions

1.10.71.9.131.8.18

Sources

CVE-2017-7233 · published · modified · JSON