CVE-2018-7537

2 advisories.

PyPI/django CVE-2018-7537: medium 5.3, EPSS 4.37%

Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters

Action: Upgrade django to 1.8.19 or later.

pip install django==2.0.3

pip install django==1.11.11

pip install django==1.8.19

Affected

introduced	fixed	last affected
2.0	2.0.3	-
1.11	1.11.11	-
1.8	1.8.19	-

Fixed versions

2.0.3

1.11.11

1.8.19

Sources

CVE-2018-7537 · published 2019-01-04T17:50:00Z · modified 2024-11-27T05:25:46.502161Z · JSON

PyPI/django CVE-2018-7537: unknown, EPSS 4.37%

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they we