Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3730HistoryMay 16, 2014 - 3:55 p.m.
CVE-2014-3730
2014-05-1615:55:05
Debian Security Bug Tracker
security-tracker.debian.org
13
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
75.2%
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by “http:\\djangoproject.com.”
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
| Debian | 11 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
| Debian | 999 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
| Debian | 13 | all | python-django | < 1.6.5-1 | python-django_1.6.5-1_all.deb |
Related
prion
prion
Open redirect
2014-05-16 15:55:00
osv
osv
Django Allows Open Redirects
2022-05-14 02:09:43
PYSEC-2014-20
2014-05-16 15:55:00
python-django - security update
2014-05-19 00:00:00
gitlab
gitlab
Malformed URLs from user input incorrectly validated
2014-05-16 00:00:00
nvd
nvd
CVE-2014-3730
2014-05-16 15:55:05
cvelist
cvelist
CVE-2014-3730
2014-05-16 15:00:00
github
github
Django Allows Open Redirects
2022-05-14 02:09:43
cve
cve
CVE-2014-3730
2014-05-16 15:55:05
ubuntucve
ubuntucve
CVE-2014-3730
2014-05-16 00:00:00
nessus
nessus
Fedora 20 : python-django15-1.5.8-1.fc20 (2014-6440)
2014-05-27 00:00:00
Fedora 20 : python-django14-1.4.13-1.fc20 (2014-6442)
2014-05-27 00:00:00
Fedora 20 : python-django-1.6.5-1.fc20 (2014-6449)
2014-05-27 00:00:00
openvas
openvas
Fedora Update for python-django15 FEDORA-2014-6440
2014-06-02 00:00:00
Mageia: Security Advisory (MGASA-2014-0231)
2022-01-28 00:00:00
Fedora Update for python-django14 FEDORA-2014-6442
2014-06-02 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 20 Update: python-django15-1.5.8-1.fc20
2014-05-26 23:58:15
[SECURITY] Fedora 20 Update: python-django-1.6.5-1.fc20
2014-05-26 23:59:30
[SECURITY] Fedora 20 Update: python-django14-1.4.13-1.fc20
2014-05-26 23:57:14
mageia
mageia
Updated python-django package fix two vulnerabilities
2014-05-19 22:53:32
debian
debian
[SECURITY] [DSA 2934-1] python-django security update
2014-05-19 20:39:58
[SECURITY] [DSA 2934-1] python-django security update
2014-05-19 20:39:58
securityvulns
securityvulns
[SECURITY] [DSA 2934-1] python-django security update
2014-06-14 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
75.2%
Related for DEBIANCVE:CVE-2014-3730