{"action":"Upgrade django to 1.11.15 or later.","affected":[{"fixed":"1.11.15","introduced":"1.11"},{"fixed":"2.0.8","introduced":"2.0"}],"component":"django","cve_ids":["CVE-2018-14574"],"ecosystem":"PyPI","epss":0.2549,"exploited":false,"fixed_versions":["2.0.8","1.11.15"],"ghsa_id":"GHSA-5hg3-6c2f-f3wr","id":"tcs_01M5KG7V9MC95H3CT52KVQZBRR","modified_at":"2023-11-08T03:59:55.770463Z","published_at":"2018-08-03T17:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-2","https://www.djangoproject.com/weblog/2018/aug/01/security-releases/","https://usn.ubuntu.com/3726-1/","http://www.securitytracker.com/id/1041403","https://www.debian.org/security/2018/dsa-4264","http://www.securityfocus.com/bid/104970","https://access.redhat.com/errata/RHSA-2019:0265","https://github.com/advisories/GHSA-5hg3-6c2f-f3wr"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2018-2","url":"https://osv.dev/vulnerability/PYSEC-2018-2"},{"source":"nvd","source_id":"CVE-2018-14574","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14574"}],"summary":"django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect."}