CVE-2015-2317

2 advisories.

PyPI/django CVE-2015-2317: medium 6.1

Django cross-site scripting (XSS) attack via user-supplied redirect URLs

Action: Upgrade django to 1.4.20 or later.

pip install django==1.4.20

pip install django==1.6.11

pip install django==1.7.7

pip install django==1.8c1

Affected

introduced	fixed	last affected
0	1.4.20	-
1.5	1.6.11	-
1.7	1.7.7	-
1.8a1	1.8c1	-

Fixed versions

1.4.20

1.6.11

1.7.7

1.8c1

Sources

CVE-2015-2317 · published 2022-05-14T02:06:51Z · modified 2024-09-18T16:08:07.646239Z · JSON

PyPI/django CVE-2015-2317: unknown

The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to co