{"action":"Upgrade django to 1.8.18 or later.","affected":[{"fixed":"1.10.7","introduced":"1.10"},{"fixed":"1.9.13","introduced":"1.9"},{"fixed":"1.8.18","introduced":"1.8"}],"component":"django","cve_ids":["CVE-2017-7234"],"ecosystem":"PyPI","epss":0.01845,"exploited":false,"fixed_versions":["1.10.7","1.9.13","1.8.18"],"ghsa_id":"GHSA-h4hv-m4h4-mhwg","id":"tcs_01M5KFJRB0N3Z7FG34X59N8D2S","modified_at":"2024-09-18T15:18:53.247955Z","published_at":"2019-01-04T17:50:17Z","references":["https://osv.dev/vulnerability/GHSA-h4hv-m4h4-mhwg","https://nvd.nist.gov/vuln/detail/CVE-2017-7234","https://github.com/django/django/commit/2a9f6ef71b8e23fd267ee2be1be26dde8ab67037","https://github.com/django/django/commit/4a6b945dffe8d10e7cec107d93e6efaebfbded29","https://github.com/django/django/commit/5f1ffb07afc1e59729ce2b283124116d6c0659e4","https://github.com/advisories/GHSA-h4hv-m4h4-mhwg","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2017-10.yaml","https://web.archive.org/web/20170429023907/http://www.securitytracker.com/id/1038177","https://web.archive.org/web/20170526042328/http://www.securityfocus.com/bid/97401","https://www.djangoproject.com/weblog/2017/apr/04/security-releases","http://www.debian.org/security/2017/dsa-3835"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-h4hv-m4h4-mhwg","url":"https://osv.dev/vulnerability/GHSA-h4hv-m4h4-mhwg"}],"summary":"Django open redirect"}