VDB
GCVE-110-MAGEIA-2017-106
GCVE-110-MAGEIA-2017-106
Advisory Published
It was discovered that Django incorrectly handled numeric redirect URLs. A
remote attacker could possibly use this issue to perform XSS attacks, and
to use a Django server as an open redirect. (CVE-2017-7233)
Phithon Gong discovered that Django incorrectly handled certain URLs when
the jango.views.static.serve() view is being used. A remote attacker could
possibly use a Django server as an open redirect. (CVE-2017-7234)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | psi | 0 (affected), 1.3-1.1.mga6 (unaffected) | — |
| Mageia | python-django | 0 (affected), 1.8.16-1.1.mga5 (unaffected), 0 (affected), 1.8.16-1.1.mga5 (unaffected) | — |
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.