USN-3254-1

Dashboard / Vulnerabilities / USN-3254-1

USN-3254-1

Summary: python-django vulnerabilities

Details: It was discovered that Django incorrectly handled numeric redirect URLs. A remote attacker could possibly use this issue to perform XSS attacks, and to use a Django server as an open redirect. (CVE-2017-7233) Phithon Gong discovered that Django incorrectly handled certain URLs when the jango.views.static.serve() view is being used. A remote attacker could possibly use a Django server as an open redirect. (CVE-2017-7234)

References: https://ubuntu.com/security/notices/USN-3254-1, https://ubuntu.com/security/CVE-2017-7233, https://ubuntu.com/security/CVE-2017-7234