CVE-2014-3730

2 advisories.

PyPI/django CVE-2014-3730: high 7.5

Django Allows Open Redirects

Action: Upgrade django to 1.4.13 or later.

pip install django==1.4.13

pip install django==1.5.8

pip install django==1.6.5

pip install django==1.7b4

Affected

introduced	fixed	last affected
1.4	1.4.13	-
1.5	1.5.8	-
1.6	1.6.5	-
1.7a1	1.7b4	-

Fixed versions

1.4.13

1.5.8

1.6.5

1.7b4

Sources

CVE-2014-3730 · published 2022-05-14T02:09:43Z · modified 2025-02-19T05:38:07.914072Z · JSON

PyPI/django CVE-2014-3730: unknown

The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduc