Vulnetix
Try Vulnetix Request Demo
CVE-2019-3498 PUBLISHED

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content.

EPSS 1.44% · 80.6th percentile

Risk Scores

EPSS Score
1.44%
80.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSpython-django0, 1.7.9-1ubuntu5, 1.8.5-2ubuntu1
Ubuntu:14.04:LTSpython-django1.6.1-2ubuntu0.10, 1.6.1-2ubuntu0.11, 1.6.1-2ubuntu0.12
Ubuntu:18.04:LTSpython-django0, 1:1.11.4-1ubuntu1, 1:1.11.6-1ubuntu1

Timeline

References

Open in Interactive Console →