{"action":"Upgrade django to 1.8.18 or later.","affected":[{"fixed":"1.10.7","introduced":"1.10a1"},{"fixed":"1.9.13","introduced":"1.9a1"},{"fixed":"1.8.18","introduced":"1.8a1"}],"component":"django","cve_ids":["CVE-2017-7233"],"ecosystem":"PyPI","epss":0.02404,"exploited":false,"fixed_versions":["1.10.7","1.9.13","1.8.18"],"ghsa_id":"GHSA-37hp-765x-j95x","id":"tcs_01M5KEV6SX2J3HGT9PTWE448YK","modified_at":"2024-09-18T16:25:30.395015Z","published_at":"2019-01-04T17:50:26Z","references":["https://osv.dev/vulnerability/GHSA-37hp-765x-j95x","https://nvd.nist.gov/vuln/detail/CVE-2017-7233","https://github.com/django/django/commit/254326cb3682389f55f886804d2c43f7b9f23e4f","https://github.com/django/django/commit/8339277518c7d8ec280070a780915304654e3b66","https://github.com/django/django/commit/f824655bc2c50b19d2f202d7640785caabc82787","https://access.redhat.com/errata/RHSA-2017:1445","https://access.redhat.com/errata/RHSA-2017:1451","https://access.redhat.com/errata/RHSA-2017:1462","https://access.redhat.com/errata/RHSA-2017:1470","https://access.redhat.com/errata/RHSA-2017:1596","https://access.redhat.com/errata/RHSA-2017:3093","https://access.redhat.com/errata/RHSA-2018:2927","https://github.com/advisories/GHSA-37hp-765x-j95x","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2017-9.yaml","https://www.djangoproject.com/weblog/2017/apr/04/security-releases","http://www.debian.org/security/2017/dsa-3835"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-37hp-765x-j95x","url":"https://osv.dev/vulnerability/GHSA-37hp-765x-j95x"}],"summary":"Django open redirect and possible XSS attack via user-supplied numeric redirect URLs"}