VDB
GCVE-110-MAGEIA-2019-35
GCVE-110-MAGEIA-2019-35
Advisory Published
An upstream patch has been backported to fix a security vulnerability in
python-django. CVE-2019-3498: Content spoofing possibility in the
default 404 page
An attacker could craft a malicious URL that could make spoofed content
appear on the default page generated by the
django.views.defaults.page_not_found() view. The URL path is no longer
displayed in the default 404 template and the request_path context
variable is now quoted to fix the issue for custom templates that use
the path.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-django | 0 (affected), 1.8.19-1.1.mga6 (unaffected), 0 (affected), 1.8.19-1.1.mga6 (unaffected) | — |
| Mageia | krename | 0 (affected), 5.0.0-1.1.mga6 (unaffected) | — |
Aliases
References
Browse GCVE Records
72,096 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.