tocsin

Debian/python-django: unknown

Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file u

Action: Upgrade python-django to 1.2.5-1 or later.

Affected

introducedfixedlast affected
01.2.5-1-

Fixed versions

1.2.5-1

Sources

published · modified · JSON