tocsin

Debian/python-django: high 7.4

The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cro

Action: Upgrade python-django to 1.9.4-1 or later.

Affected

introducedfixedlast affected
01.9.4-1-

Fixed versions

1.9.4-1

Sources

published · modified · JSON