tocsin

CVE-2019-12781

2 advisories.

PyPI/django CVE-2019-12781: medium 5.3, EPSS 1.71%

Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS

Action: Upgrade django to 1.11.22 or later.

pip install django==2.1.10
pip install django==2.2.3
pip install django==1.11.22

Affected

introducedfixedlast affected
2.12.1.10-
2.22.2.3-
1.111.11.22-

Fixed versions

2.1.102.2.31.11.22

Sources

CVE-2019-12781 · published · modified · JSON

PyPI/django CVE-2019-12781: unknown, EPSS 1.71%

An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT sett

Action: Upgrade django to 1.11.22 or later.

pip install django==2.1.10
pip install django==2.2.3
pip install django==1.11.22

Affected

introducedfixedlast affected
1.111.11.22-
2.12.1.10-
2.22.2.3-

Fixed versions

2.1.102.2.31.11.22

Sources

CVE-2019-12781 · published · modified · JSON